classilla/classilla

Implement TLS_FALLBACK_SCSV

Opened this issue · 3 comments

https://bugzilla.mozilla.org/show_bug.cgi?id=1036735

Original issue reported on code.google.com by classi...@floodgap.com on 29 Oct 2014 at 5:44

Does this require update nss version at least upto 3.16 or 3.17? How far have 
you done on this item? It got lots and lots of compile errors when I just 
replaced nss to the latest version. If I am correct, some of them were because 
CodeWarrior 7.1 does not support literal assignment (to struct). There could be 
consequences even if I'd eliminate errors I don't know. I might need to read 
Porting GCC to CodeWarrior documentation to understand what is involved, which 
I guess it might help.

Original comment by terr...@gmail.com on 9 Dec 2014 at 9:16

No, this is just me patching SSL manually. I've had little luck with wholesale 
NSS updates.

Original comment by classi...@floodgap.com on 9 Dec 2014 at 5:05

I don't see much point given that we should be able to disable SSLv3 soon.

Original comment by yuhongba...@hotmail.com on 23 Apr 2015 at 6:44