[Jessie-discuss] 0.9.7 + Mozilla/OpenSSL working - 1.0.0/CVS still nothing

[Martin Egholm Nielsen]

Hi there,

Although it seems like I've got a serious monologue going on here, I'll 
still go ahead posting the updates - someone may stumble across it 
someday :-)

Well, now I've got Jessie 0.9.7 up and running with all the clients I 
can imagine: Mozilla, IE, Opera, Sun's JSSE, and OpenSSL.
So what is the secret?! Well, only Mozilla and OpenSSL didn't work out 
of the box with 0.9.7, but after enabling only the ciphersuite that 
worked with the other ones, they suddenly begun to work.
It seems that Jessie/GNU-Crypto doesn't work well with e.g. 
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA", whereas "SSL_RSA_WITH_RC4_128_MD5" does.

There are quite some more suites that doesn't work (or maybe just takes 
so much computational handshake time, that Mozilla times out)...

But still no luck with Jessie 1.0.0/CVS - however, trying/enforcing 
different suites, I'm able to bring up some other exceptions than just 
MACException's - e.g. IndexOutOfBounds (in some util-class Trim - don't 
quite recall right now)...

That's all the monologue you get for now - I may return in the 
gnu-crypto list soon; I seem to get some digest-exceptions trying to 
deserialise some Serializable objects - bummer!

// Martin