[tor-bugs] #26819 [Core Tor/Tor]: Minimal client-side support for TLS via NSS

[Tor Bug Tracker & Wiki]

#26819: Minimal client-side support for TLS via NSS
-------------------------+-------------------------------------------------
     Reporter:  nickm    |      Owner:  (none)
         Type:           |     Status:  new
  enhancement            |
     Priority:  Medium   |  Milestone:  Tor: 0.3.5.x-final
    Component:  Core     |    Version:
  Tor/Tor                |   Keywords:  035-roadmap-subticket, 035-triaged-
     Severity:  Normal   |  in-20180711
Actual Points:           |  Parent ID:  #26631
       Points:           |   Reviewer:
      Sponsor:           |
  Sponsor8-can           |
-------------------------+-------------------------------------------------
 When porting libtor-tls to NSS, we'll start with client-side support for
 our TLS features.  This will only have to include originating connections,
 and only with the most recent link handshake.  It won't need any key
 export support at all.

 At this point, we can have "--enable-nss" imply "--disable-openssl", and
 also have it imply that ORPort cannot be set (since you can't be a Tor
 server with this minimal TLS support.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26819>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online