sftcd
sftcd
The push above resolves the `TODO(ECH)` that was at the top of `test/ech_corrupt_test.c`: to add a test case where the outer CH is TLSv1.3 but the inner CH is missing...
fix above tweaks conditions for running `ech_corrupt_test` to require TLSv1.2 support so we get the expected error for the recently added test
Small change above fixes an issue with HRR I (eventually:-) found today while rebasing another branch with the (now clang formatted) upstream master - somewhere between the reformatting and some...
push above adds some more tests of bad inner client hello values and a check that if ECH decryption worked, there must be a `supported_versions` extension present (indicating TLSv1.3 or...
> The Runchecker CI failure is still relevant. That one's a puzzle. Will look at it in a bit.
> > The Runchecker CI failure is still relevant. > > That one's a puzzle. Will look at it in a bit. I think I've figured that one out. It's...
>> I'm ok if the answer is: "get shared-mode released then work on split-mode." > > This seems like the correct answer. Ok, I'll take out the `SSL_CTX_ech_raw_decrypt()` and related...