Posts filed under “Programming”

Python 3.3 patch for TLS-SRP support

I just posted a patch for Python 3.3 to add TLS-SRP support (Issue #11943). This patch adds support for TLS-SRP (RFC 5054) to Python ssl.SSLSocket, _ssl.c, http, and urllib. TLS-SRP lets a client and server establish a mutually authenticated SSL channel using only a username and password (a certificate may also be used to supplement [...]

Updated Steffen Schulz’s NSS patch for TLS-SRP support

I updated Steffen Schulz’s NSS patch for TLS-SRP support and posted it to Bugzilla #405155. NSS (Network Security Services) is a Mozilla library that provides SSL and crypto routines to Firefox, Chrome, and lots of other apps. I modified Steffen Schulz’s patch to: use the same format for the SRP passwd and group param file [...]

TLS-SRP in Chrome announcement

I just posted an in-progress patch that adds TLS-SRP support to Chrome over at the Chromium code review site. I also posted a Chromium-discuss message announcing my progress. To install it yourself, see the TLS-SRP in Chrome wiki page.

cURL 7.21.4 released, with TLS-SRP support

cURL 7.21.4 was just released, with support for TLS-SRP. I submitted the patch for this feature (based on a previous patch by Peter Sylvester). If you are using, or are interested in using, TLS-SRP on the Web, I’d love to hear from you. I also have instructions on setting up a TLS-SRP Web server, and [...]

cURL patch for TLS-SRP support (using GnuTLS)

(Posted to curl-library) I revived a proposed patch by Peter Sylvester to add support to cURL for TLS-SRP (RFC 5054), which is mutually authenticated TLS with passwords instead of client/server certs. Peter’s patch was postponed because it relied on OpenSSL, which still doesn’t have TLS-SRP support (unlike GnuTLS, which now does). My patch exposes GnuTLS’s [...]