Differential D101050

Bug 1681585 - Add ECH support to selfserv.
ClosedPublic
Actions

Authored by kjacobs on Jan 7 2021, 7:18 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Jun 15, 7:23 PM

	Unknown Object (File)
	Mon, Jun 15, 6:41 PM

	Unknown Object (File)
	Mon, Jun 15, 2:26 PM

	Unknown Object (File)
	Mon, Jun 15, 12:16 PM

	Unknown Object (File)
	Mon, Jun 8, 12:14 PM

	Unknown Object (File)
	Mon, Jun 8, 11:19 AM

	Unknown Object (File)
	Mon, Jun 8, 11:17 AM

	Unknown Object (File)
	Mon, Jun 8, 5:15 AM

Subscribers

None

Details

Reviewers

Commits

rNSS92dcda94c1d4: Bug 1681585 - Add ECH support to selfserv. r=mt

Bugzilla Bug ID

Summary

Usage example:
mkdir dbdir && cd dbdir
certutil -N -d .
certutil -S -s "CN=ech-public.com" -n ech-public.com -x -t "C,C,C" -m 1234 -d .
certutil -S -s "CN=ech-private-backend.com" -n ech-private-backend.com -x -t "C,C,C" -m 2345 -d .
../dist/Debug/bin/selfserv -a ech-public.com -a ech-private-backend.com -n ech-public.com -n ech-private-backend.com -p 8443 -d dbdir/ -X publicname:ech-public.com
(Copy echconfig from selfserv output and paste into the below command)
../dist/Debug/bin/tstclnt -D -p 8443 -v -A tests/ssl/sslreq.dat -h ech-private-backend.com -o -N <echconfig> -v

Diff Detail

Repository: rNSS nss

Event Timeline

kjacobs created this revision.Jan 7 2021, 7:18 PM

Herald added a project: secure-revision. · View Herald TranscriptJan 7 2021, 7:18 PM

Harbormaster completed remote builds in B274569: Diff 383867.Jan 7 2021, 7:18 PM

phab-bot published this revision for review.Jan 7 2021, 7:18 PM

phab-bot changed the visibility from "Custom Policy" to "Public (No Login Required)".

phab-bot changed the edit policy from "Custom Policy" to "Restricted Project (Project)".

phab-bot removed a project: secure-revision.

kjacobs updated this revision to Diff 385407.Jan 12 2021, 5:46 PM

kjacobs edited the summary of this revision. (Show Details)

Harbormaster completed remote builds in B275889: Diff 385407.Jan 12 2021, 5:46 PM

kjacobs updated this revision to Diff 385408.Jan 12 2021, 5:47 PM

Harbormaster completed remote builds in B275890: Diff 385408.Jan 12 2021, 5:47 PM

kjacobs added a reviewer: mt.Jan 12 2021, 5:48 PM

For the interop runner, we need to take the HPKE keypair and echconfigs as input rather than generating them. I'm going to revise this accordingly.

kjacobs updated this revision to Diff 387412.Jan 16 2021, 12:41 AM

kjacobs edited the summary of this revision. (Show Details)

Harbormaster completed remote builds in B277511: Diff 387412.Jan 16 2021, 12:41 AM

mt accepted this revision.Jan 17 2021, 10:34 PM

This revision is now accepted and ready to land.Jan 17 2021, 10:34 PM

Closed by commit rNSS92dcda94c1d4: Bug 1681585 - Add ECH support to selfserv. r=mt (authored by kjacobs). · Explain WhyJan 25 2021, 5:52 PM

This revision was automatically updated to reflect the committed changes.

kjacobs added a commit: rNSS92dcda94c1d4: Bug 1681585 - Add ECH support to selfserv. r=mt.

Revision Contents
Changeset List

Path

Size

cmd/

selfserv/

221 lines

Diff 390441

cmd/selfserv/selfserv.c

Loading...