• Registered: 2019-09-24
  • Posts: 5

Topic: [NO-UPDATE] Can't establish connection to server using ECC secp384r1

I generated a new test cert today with OpenSSL to compare performance using a secp384r1 key to that I've observed using prime256v1. I uncommented HAVE_ECC384 in user_settings.h, made a build and wolfSSL_CTX_use_certificate_buffer() and wolfSSL_CTX_use_PrivateKey_buffer() happily consumed both the cert and key.

But when I tried to establish a browser connection using both Chrome and Opera (latest versions of each) they reported an unspecified protocol error.

Before I invest time investigating this, do you know if this doesn't work because the secp384r1 curve isn't supported by these browsers?

Share

  • From: Bozeman
  • Registered: 2014-05-09
  • Posts: 777

Re: [NO-UPDATE] Can't establish connection to server using ECC secp384r1

Hi bsda_dev,

It's possible the curve isn't supported in the browser though unlikely. Can you capture a wireshark trace of the failed connection for review and evaluation?

Warm Regards,

K

Kaleb J. Himes's Website

Share