Re: Debug info on NSS tools

2019-01-03 Thread John Jiang
Just tried it, but looked not work. $ export SSLDEBUG=1 $ export SSLTRACE=127 $ tstclnt -v ... I didn't get more logs. On Thu, Jan 3, 2019 at 3:46 PM Martin Thomson wrote: > Try exporting SSLTRACE=100. > > That might be too much detail, but lower numbers are still useful. I find > that 20-ish

TLS ESNI and HelloRetryRequest in Firefox 64, Firefox Nightly

2019-01-03 Thread Alexander Venedioukhin (lists)
Hello, I'm implementing ESNI (encrypted SNI, current draft 02) server-side. It works with Firefox 64.0 and Nightly 66.0a1 as expected, until the server sends HelloRetryRequest during handshake. In latter case Firefox responds with plain text SNI extension (same hostname) in second ClientHello,