Brecht

Support for acme client

2

I plan to work on this myself, but I'm looking for some initial feedback first. On a very high level ACME logic looks like: 1. Send post request to CA...

We already support setting this in client hello, but don't do anything yet with the server response to it. Cloudflare boring ssl fork we use, does already have quite some...

Tls extension: Encrypted client hello full implementation

3

Encrypted client hello (ECH) works by doing a dns RR query for https. Those records contain svcParams, if one of those params is ECH, then we should use the config...

We already properly set this in client hello, so we can already ask server to send us smaller packets. What we don't do yet, and still needs to be implemented:...

While working on #470 I noticed that rama-boring sys doesn't contain. ``` // SSL_set_alps_use_new_codepoint configures whether to use the new ALPS // codepoint. By default, the old codepoint is used....

Track potential use of eval macro

1

[Eval macro](https://crates.io/crates/eval-macro) is a really cool tool that is situated somewhere between macro_rules and procedural macros. It's very easy to read and quite powerful and could help us a lot...

gcr.io/distroless/cc-debian12:nonroot huge performance decrease for rust based app

1

I recently switched a Dockerfile that builds a [Rama](https://github.com/plabayo/rama) derivative from: ``` FROM debian:bookworm-slim AS prod RUN apt-get update && \ apt-get install --no-install-recommends -y ca-certificates ``` to this: ```...