Skip to content

Encrypted SNI#155

Merged
kazuho merged 35 commits into
masterfrom
kazuho/esni
Dec 20, 2018
Merged

Encrypted SNI#155
kazuho merged 35 commits into
masterfrom
kazuho/esni

Conversation

@kazuho

@kazuho kazuho commented Jul 6, 2018

Copy link
Copy Markdown
Member

implements https://datatracker.ietf.org/doc/draft-rescorla-tls-esni/

ToDo:

  • refactor the API related to private keys
    • ptls_parse_esni should accept a callback that is used to load the private key (which could return an ptls_key_exchange_context_t * encapsulating a private key protected by neverbleed)
  • add tests

kazuho added 6 commits July 6, 2018 15:03
* add pointer from context to algo
* allow reuse (adds `release` flag to `on_exchange`)
* add `load`, `save` callbacks
* add `data` for simplification (internal ID passing)
Comment thread src/esni.c Outdated
Comment thread t/cli.c
* Now, private key can be managed outside of the memory space.
* Added API to convert EVP_PKEY to ptls-openssl key exchange.
* Commands receive filenames of ESNI private keys as options.
* picotls-esni command emits just the raw ESNIKeys.

The commit reverts previous changes to the key-exchange API that
added the load and save interfaces.
@kazuho kazuho changed the title [wip] Encrypted SNI Encrypted SNI Dec 17, 2018
@kazuho

kazuho commented Dec 17, 2018

Copy link
Copy Markdown
Member Author

The PR is ready, will soon be merged to master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants