Skip to content

Conversation

@skmcgrail
Copy link
Member

@skmcgrail skmcgrail commented Mar 21, 2023

Issues:

Resolves CryptoAlg-1653

Description of changes:

Add support for TLS 1.3 for the SSL transfer feature, which previously only support TLS 1.2 connections.

Call-outs:

I've added tls_transfer.asn as a way to better document the TLS transfer encoding using the ASN.1 module syntax definition. Should hopefully make it easier to track the definitions going forward. There is a handy visual studio code plugin that can be used to give syntax validation and highlighting as well.

Testing:

  • Manual testing with a variation on sslecho which I updated to allow the client to trigger a transfer on demand.
  • Unblocked TLS 1.3 transfer testing that was previously disabled.
  • Updated the bssl_shim tests to include TLS 1.3 (359 tests!).

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and
the ISC license.

@torben-hansen
Copy link
Contributor

Could this PR be split into smaller pieces?

@skmcgrail
Copy link
Member Author

Could this PR be split into smaller pieces?

The majority of changes here are formatting changes to files I touched because they didn’t actually conform to the clang-format file definition. The actual change excluding the fuzzing files is fairly small.

@skmcgrail skmcgrail force-pushed the tls13 branch 3 times, most recently from 6633355 to 8d4cc00 Compare March 21, 2023 18:46
@skmcgrail skmcgrail force-pushed the tls13 branch 3 times, most recently from c9d6d78 to 607b6bb Compare March 21, 2023 21:42
@skmcgrail skmcgrail force-pushed the tls13 branch 2 times, most recently from cd12ec0 to 21390bf Compare March 23, 2023 22:53
samuel40791765
samuel40791765 previously approved these changes Mar 28, 2023
@skmcgrail
Copy link
Member Author

skmcgrail commented Mar 29, 2023

Will rebase again once #912 is merged in so we can have valgrind validation for libssl.

@skmcgrail skmcgrail force-pushed the tls13 branch 2 times, most recently from 7ad4a90 to e7c6fc5 Compare March 31, 2023 22:50
@skmcgrail skmcgrail requested a review from torben-hansen March 31, 2023 23:50
@skmcgrail skmcgrail merged commit aec0794 into aws:main Apr 5, 2023
@skmcgrail skmcgrail deleted the tls13 branch April 5, 2023 16:30
@skmcgrail skmcgrail mentioned this pull request Apr 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants