mint

mint copied to clipboard

Add support for certificate validation in client

1

grittygrease

The PSK cipher suite in early data must match the previously established symmetric cipher. From the latest spec (12): 6.3.2.5. Early Data Indication The client specifies the cryptographic configuration for...

grittygrease

Resumption needs to cover the following: - Attempt to resume a connection when the server has expired the session ticket - Attempt to resume a connection when the server does...

grittygrease

mint client will return incorrect buffer on 0 read

1

If a Read fails on EOF with 0 byte in line 25, it will append the previous buffer again. Solution would be to use `response += string(buffer[:read])`

vkrasnov

bifurcation

bifurcation

bifurcation

Right now, most of the API is private (starts with a lower-case letter). We should consider whether it would be useful to expose more lower-layer primitives, e.g., to facilitate testing...

bifurcation

Currently, non-ApplicationData messages after the handshake are ignored. We need to do something with them.

bifurcation

Once we have the ability to configure certificates, we will need to implement the certificate selection algorithm defined in the spec, using SNI, signature_algorithms, and supported_groups.

bifurcation