maindavfs2 - Support: sr #108541, information about forward secrecy

 
 

sr #108541: information about forward secrecy

Submitter:  None
Submitted:  Fri 11 Apr 2014 02:37:22 PM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  In Progress
Privacy:  Public Assigned to:  _71007
Originator Email:  -email is unavailable- Open/Closed:  Closed
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 11 Apr 2014 08:12:18 PM UTC, comment #1: 

davfs2 uses the Neon library for WebDAV including TLS-support.

The Neon interface offers very limited possibilities to influence TLS negotiation and I don't see a way to enforce PFS. If somebody knows how to do this I would be willing to implement a configuration option for this.

Meanwhile you can use Wireshark to check what cipher suite is used with your server. The Client_Hello message shows all the cipher suites Neon is willing to accept (79 on my system). The Server_Hello message shows which one is choosen by the server (e.g. TLS_DHE_RSA_WITH_AES_256_CBC_SHA) .

The cipher suite should start with either TLS_DHE_... or TLS_ECDHE_... DHE stands for ephemeral Diffie-Hellman. That's what guarantees forward secrecy.

Important Note: Please consult further information. I surely am not an expert on cryptography and may be wrong.

Werner

- <_71007>
Fri 11 Apr 2014 02:37:22 PM UTC, original submission:  

I wanted to know if forward secrecy is used when an https system is mounted. I checked the man page for mount.davfs but found nothing. Is there an option to require the use of forward secrecy and fail the mount if the server does not support it?

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-04-15 _71007 Open/ClosedOpen Closed
    2014-04-11 _71007 StatusNone In Progress
        Assigned toNone _71007

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code