Skip to content

Expose client-side ECH #282

Closed
Closed
@jrose-signal

Description

@jrose-signal

Now that Cloudflare is rolling out ECH again, it'd be great to see the ECH client APIs exposed in boring:

  • SSL_set1_ech_config_list for basic support
  • SSL_get0_ech_retry_configs for recovery from key mismatches
  • SSL_get0_ech_name_override for custom verifiers to support fallback to non-ECH
  • SSL_ech_accepted for completeness

The server APIs would also be good to add, and might be the best way to write a test, but they're a little more involved (EVP_HPKE_KEY has to be exposed in order to provide SSL_ECH_KEYS_add).

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions