diff options
| author | Daniel Atallah <datallah@pidgin.im> | 2014-10-31 18:16:41 -0400 |
|---|---|---|
| committer | Daniel Atallah <datallah@pidgin.im> | 2014-10-31 18:16:41 -0400 |
| commit | 039e6115b2ca3e52b6e12427f16f09c571676e8b (patch) | |
| tree | e59cb988ebceda96eff412e783631183d30cc4f2 | |
| parent | 7d5e99bb192f8cdad45baf588eded8d7df585389 (diff) | |
| download | pidgin-039e6115b2ca3e52b6e12427f16f09c571676e8b.tar.gz | |
Add logging of supported and enabled cipher suites to the NSS plugin.
| -rw-r--r-- | libpurple/plugins/ssl/ssl-nss.c | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/libpurple/plugins/ssl/ssl-nss.c b/libpurple/plugins/ssl/ssl-nss.c index 066203157f..5749f19217 100644 --- a/libpurple/plugins/ssl/ssl-nss.c +++ b/libpurple/plugins/ssl/ssl-nss.c @@ -139,6 +139,37 @@ static gchar *get_error_text(void) return ret; } +static void ssl_nss_log_ciphers(void) { + const PRUint16 *cipher; + for (cipher = SSL_GetImplementedCiphers(); *cipher != 0; ++cipher) { + const PRUint16 suite = *cipher; + SECStatus rv; + PRBool enabled; + PRErrorCode err; + SSLCipherSuiteInfo info; + + rv = SSL_CipherPrefGetDefault(suite, &enabled); + if (rv != SECSuccess) { + err = PR_GetError(); + purple_debug_warning("nss", + "SSL_CipherPrefGetDefault didn't like value 0x%04x: %s\n", + suite, PORT_ErrorToString(err)); + continue; + } + rv = SSL_GetCipherSuiteInfo(suite, &info, (int)(sizeof info)); + if (rv != SECSuccess) { + err = PR_GetError(); + purple_debug_warning("nss", + "SSL_GetCipherSuiteInfo didn't like value 0x%04x: %s\n", + suite, PORT_ErrorToString(err)); + continue; + } + purple_debug_info("nss", "Cipher - %s: %s\n", + info.cipherSuiteName, + enabled ? "Enabled" : "Disabled"); + } +} + static void ssl_nss_init_nss(void) { @@ -195,6 +226,8 @@ ssl_nss_init_nss(void) _identity = PR_GetUniqueIdentity("Purple"); _nss_methods = PR_GetDefaultIOMethods(); + + ssl_nss_log_ciphers(); } static SECStatus |