Re: Disabling all uses of elliptical curves

On Saturday 30 April 2016 09:05:27 Martin Thomson wrote:
> At the TLS layer, you can disable all suites that require ECC.

I haven't tested it, but I don't think that will stop NSS trusting RSA 
certificates signed by ECC CAs.
 
> On Sat, Apr 30, 2016 at 4:40 AM, Franziskus Kiefer 
<[email protected]> wrote:
> > there's no runtime option but you can disable it at compile time
> > with
> > NSS_DISABLE_ECC, see [1]
> > 
> > [1]
> > https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Refere
> > nce/NSS_environment_variables> 
> > On Fri, Apr 29, 2016 at 3:44 PM, jonetsu <[email protected]> 
wrote:
> >> Hello,
> >> 
> >> Is there a run-time option to disable all and every uses of
> >> elliptical curves ?
> >> 
> >> If not, is there a compile option ?
> >> 
> >> Thanks.
> >> 
> >> 
> >> 
> >> 
> >> --
> >> View this message in context:
> >> http://mozilla.6506.n7.nabble.com/Disabling-all-uses-of-elliptical-> >> curves-tp354147.html Sent from the Mozilla - Cryptography mailing
> >> list archive at Nabble.com. --
> >> dev-tech-crypto mailing list
> >> [email protected]
> >> https://lists.mozilla.org/listinfo/dev-tech-crypto
> > 
> > --
> > dev-tech-crypto mailing list
> > [email protected]
> > https://lists.mozilla.org/listinfo/dev-tech-crypto

-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=aDvJ
-----END PGP SIGNATURE-----