$CERTHASH shows ? for certificates signed with ECDSA about cipherfox

[gavinhungry]

@reubendowle, can you provide me a link to a public server using such a cert? I can create a test server, but if you already know of one ...

[reubendowle]

I don't actually know of any public websites using such a cert - at present most sites using ECC certificates (eg google) are signed by certs that use RSA. I noticed this problem because I am using a self-signed ECC certificate.

[reubendowle]

I found a public website showing this issue:
https://xyiff.com/

[gavinhungry]

@reubendowle, thanks!

[gavinhungry]

Looks like we need to parse out the X.509 OID from the cert. I'm sure this is doable, just want to avoid hard-coding anything: https://www.ietf.org/rfc/rfc5480.txt

[gavinhungry]

More useful information: http://oid-info.com/get/1.2.840.10045.4.3.2 (ecdsa-with-SHA256)

[gavinhungry]

@reubendowle, this addition is in CipherFox 3.10.1: https://addons.mozilla.org/en-US/firefox/addon/cipherfox/versions/?page=1#version-3.10.1

[reubendowle]

Thanks @gavinhungry, that updated version works well for me.