trafficserver Support CLIENT_HELLO split across multiple packets

Our TLS CLIENT_HELLO processing logic assumed all CLIENT_HELLO bytes came in a single TCP packet. However, with more recent cryptographic ciphers, the CLIENT_HELLO is often greater than the standard 1,500 byte MTU, so the CLIENT_HELLO is being delivered in multiple packets. This updates our logic to properly buffer and parse data across multiple socket reads.

Fixes: #11758

Jun 13 '25 22:06 bneradt

I guess no hope in getting this fix backported to older major versions?

Jun 18 '25 13:06 tomuxi

I guess no hope in getting this fix backported to older major versions?

The cherry-pick for 9.x is non-trivial, but I can look into it.

Jun 18 '25 22:06 bneradt

I guess no hope in getting this fix backported to older major versions?

The cherry-pick for 9.x is non-trivial, but I can look into it.

I made a 9.2.x backport: https://github.com/apache/trafficserver/pull/12319

Jun 25 '25 21:06 bneradt

Cherry-picked to 10.1.x branch

Jun 30 '25 15:06 cmcfarlen