зеркало из https://github.com/mozilla/gecko-dev.git
c27baf9ddb
This patch enables PSM and Firefox to use TLS 1.3 Encrypted Client Hello (draft -08). Specifically: - Compile NSS with NSS_ENABLE_DRAFT_HPKE=1 - Add ECH "public_name" handling in SSLServerCertVerification.cpp (see: https://tools.ietf.org/html/draft-ietf-tls-esni-08#section-6.3.2) - Adds `mIsAcceptedEch` to TransportSecurityInfo, and xpcshell tests for ECH use cases - Adds EncryptedClientHelloServer to facilitate the xpcshell tests - Un-ifdef Set/GetEchConfigs code in nsNSSIOLayer.cpp. Also reverted the Base64 encoding and decoding, as the data returned from DNS is already decoded (wire-format). Differential Revision: https://phabricator.services.mozilla.com/D92651 |
||
|---|---|---|
| .. | ||
| neqo | ||
| neqo_glue | ||
| moz.build | ||
| nsINamedPipeService.idl | ||
| nsISOCKSSocketInfo.idl | ||
| nsISSLSocketControl.idl | ||
| nsISocketProvider.idl | ||
| nsISocketProviderService.idl | ||
| nsITransportSecurityInfo.idl | ||
| nsNamedPipeIOLayer.cpp | ||
| nsNamedPipeIOLayer.h | ||
| nsNamedPipeService.cpp | ||
| nsNamedPipeService.h | ||
| nsSOCKSIOLayer.cpp | ||
| nsSOCKSIOLayer.h | ||
| nsSOCKSSocketProvider.cpp | ||
| nsSOCKSSocketProvider.h | ||
| nsSocketProviderService.cpp | ||
| nsSocketProviderService.h | ||
| nsUDPSocketProvider.cpp | ||
| nsUDPSocketProvider.h | ||