Issue with TLS_ECDHE_RSA_AES_128_CBC_SHA256 cipher suite.

Fabrice Gautier fabrice.gautier at gmail.com
Tue Nov 8 04:14:03 CET 2011


Hi,

It looks like this cipher suite is using the wrong hash.


>From algorithms/ciphersuites.c:


  GNUTLS_CIPHER_SUITE_ENTRY (GNUTLS_ECDHE_RSA_AES_128_CBC_SHA256,
                             GNUTLS_CIPHER_AES_128_CBC, GNUTLS_KX_ECDHE_RSA,
                             GNUTLS_MAC_SHA1, GNUTLS_TLS1_2,
                             GNUTLS_VERSION_MAX, 1),

Should be GNUTLS_MAC_SHA256 instead of GNUTLS_MAC_SHA1


-- Fabrice




More information about the Gnutls-help mailing list