Bug 908069

Summary: [RFE] Add GOST crypto algorithm support in NSS
Product: [Fedora] Fedora Reporter: Mikhail <mikhail.v.gavrilov>
Component: nssAssignee: Kai Engert (:kaie) (inactive account) <kengert>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: emaldona, kdudka, kengert, paul
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-18 13:09:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mikhail 2013-02-05 19:09:25 UTC
Sorry, I don't found place where I can ask this question.
Why currently CURL builded with NSS crypto provider instead openssl? For me openssl much better because openssl support much more crypto algorithms (for example GOST) and have plugins architecture for extending.

Comment 1 Paul Howarth 2013-02-05 19:42:38 UTC
Some references from the time cURL switched to NSS from OpenSSL:

http://fedoraproject.org/wiki/FedoraCryptoConsolidation
http://fedoraproject.org/wiki/CryptoConsolidationEval

Comment 2 Kamil Dudka 2013-02-06 12:33:52 UTC
We intentionally build libcurl against nss.  The lack of GOST crypto algorithms needs to be addressed in nss.  There are some upstream bugs for adding the GOST crypto algorithms to nss:

https://bugzilla.mozilla.org/show_bug.cgi?id=518787
https://bugzilla.mozilla.org/show_bug.cgi?id=608725

Comment 3 Mikhail 2013-02-06 14:15:16 UTC
You can use follow command for test GOST support in curl
$ curl -F 'test=foo' https://icrs.nbki.ru/products/B2BRequestServlet

Comment 4 Fedora Admin XMLRPC Client 2016-08-15 15:52:33 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 5 Kai Engert (:kaie) (inactive account) 2016-11-18 13:09:04 UTC
Requests for additional ciphers must be submitted to the upstream Mozilla NSS project at bugzilla.mozilla.org

I see you already found
  https://bugzilla.mozilla.org/show_bug.cgi?id=608725
where you commented, too.