Skip to content

Unique DoT and DoH SSL contexts to allow for different ALPN - #1222

Merged
gthess merged 4 commits into
masterfrom
features/separate_dot_doh_ssl_ctx
Jan 20, 2025
Merged

Unique DoT and DoH SSL contexts to allow for different ALPN#1222
gthess merged 4 commits into
masterfrom
features/separate_dot_doh_ssl_ctx

Conversation

@gthess

@gthess gthess commented Jan 15, 2025

Copy link
Copy Markdown
Member

To follow the recent interoperability TLS fixes from NSD.

I would appreciate a second pair of eyes especially for the tls_session_ticket_keys.

@gthess
gthess requested a review from wcawijngaards January 15, 2025 16:20
@gthess gthess self-assigned this Jan 15, 2025

@wcawijngaards wcawijngaards left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This sets the ALPN right on listening SSL transports.

The ssl ticket keys, are now using the same list in memory and same config for both types of transport. I guess if the ticket key is there it can provide session resumption.

Comment thread daemon/unbound.c
@gthess

gthess commented Jan 17, 2025

Copy link
Copy Markdown
Member Author

A couple of small additions for ALPN selection and optional context creation.

@gthess
gthess merged commit e4483bb into master Jan 20, 2025
gthess added a commit that referenced this pull request Jan 20, 2025
- Merge #1222: Unique DoT and DoH SSL contexts to allow for different
  ALPN.
@gthess
gthess deleted the features/separate_dot_doh_ssl_ctx branch January 20, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants