View Issue Details

IDProjectCategoryView StatusLast Update
0006481unrealircdpublic2024-11-09 13:09
Reportersyzop Assigned Tosyzop  
PrioritynormalSeveritytweakReproducibilityalways
Status resolvedResolutionfixed 
Product Version6.1.8.1 
Fixed in Version6.1.9 
Summary0006481: Windows version does not allow setting set::tls::ecdh-curves
DescriptionIt was reported to me that the Windows version does not support setting set::tls::ecdh-curves. It gives the following error:
* [error] ecdh-curves specified but your OpenSSL/LibreSSL library does not support setting curves manually by name. Either upgrade to a newer library version or remove the 'ecdh-curves' directive from your configuration file
TagsNo tags attached.
3rd party modules

Activities

syzop

2024-11-09 11:47

administrator   ~0023397

This is because on Windows we don't run ./configure and someone (me!) forgot to add #define HAS_SSL_CTX_SET1_CURVES_LIST to include/windows/setup.h.

syzop

2024-11-09 13:09

administrator   ~0023398

Fixed in git commit b653c68df06fd21079781c201aaad14cd9c43571 and comment rectified in 18b171a071febd6f44d25ff1935a3685f05e30ba:

Fix error on Windows when trying to set set::tls::ecdh-curves.
"[error] ecdh-curves specified but your OpenSSL/LibreSSL library does not
 support setting curves manually by name. Either upgrade to a newer library
 version or remove the 'ecdh-curves' directive from your configuration file"

This also meant the default curves that were offered were up to LibreSSL,
which meant the following list in practice:
 Elliptic curves offered: prime256v1 secp384r1 X25519
Instead of:
 Elliptic curves offered: prime256v1 secp384r1 secp521r1 X25519"
So it was only missing secp521r1. Nothing major.

Issue History

Date Modified Username Field Change
2024-11-09 11:46 syzop New Issue
2024-11-09 11:46 syzop Assigned To => syzop
2024-11-09 11:46 syzop Status new => assigned
2024-11-09 11:47 syzop Note Added: 0023397
2024-11-09 13:09 syzop Status assigned => resolved
2024-11-09 13:09 syzop Resolution open => fixed
2024-11-09 13:09 syzop Fixed in Version => 6.1.9
2024-11-09 13:09 syzop Note Added: 0023398