Bug 1034493

Summary: GCM support introduced in 3.15.2 doesn't work
Product: [Fedora] Fedora Reporter: Christian Stadelmann <fedora>
Component: nssAssignee: Elio Maldonado Batiz <emaldona>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 20CC: emaldona, kdudka, kengert, rrelyea
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-28 18:53:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Christian Stadelmann 2013-11-25 23:52:48 UTC 
Description of problem:
According to https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes and https://bugzilla.mozilla.org/show_bug.cgi?id=880543 NSS 3.15.2 introduced support for GCM.

Version-Release number of selected component (if applicable): 3.15.2-3

According to https://www.ssllabs.com/ssltest/viewMyClient.html and https://cc.dcsec.uni-hannover.de/ current versions of Firefox 25.0-3 / nss 3.15.2-3 don't support GCM (you need to set security.tls.version.max to 3 to run this test since GCM is only specified for TLSv1.2).
Comment 1 Bob Relyea 2013-11-26 19:03:39 UTC 
You have to turn GCM on. I don't believe Firefox 25 does this.
Comment 2 Christian Stadelmann 2013-11-26 21:28:28 UTC 
Afaik Firefox doesn't provide any options to enable GCM.
Comment 3 Christian Stadelmann 2013-11-26 21:29:00 UTC 
Afaik Firefox doesn't provide any options to enable or disable GCM.
Comment 4 Bob Relyea 2013-11-26 22:36:07 UTC 
Right, so this is a firefox issue, probably best handled by an upstream bug (though I think there is already work upstream to get TLS 1.2 and GCM enabled in newer versions of ff).
Comment 5 Elio Maldonado Batiz 2013-11-26 22:47:53 UTC 
Likely on FF 27, see https://bugzilla.mozilla.org/show_bug.cgi?id=861266