Go version
go version go1.24.0 linux/amd64
Output of go env in your module/workspace:
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE=''
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/home/matt/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/home/matt/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3610820285=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/home/matt/Dev/caddyserver/caddy/go.mod'
GOMODCACHE='/home/matt/go/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/home/matt/go'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/lib/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='on'
GOTELEMETRYDIR='/home/matt/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/lib/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.0'
GOWORK=''
PKG_CONFIG='pkg-config'
What did you do?
Implementing Encrypted ClientHello (server-side).
What did you see happen?
errMalformedECHConfig ("tls: malformed ECHConfigList") is returned in at least 17 places, although most are errors parsing ECHConfig, not ECHConfigList.
Additionally, this error is very vague. Since we have to serialize the ECHConfig ourselves, and crypto/tls adds extra requirements, any chance we could get a little more info as to what is wrong with it?
Also, the following godoc comment seems to have a mistake:
type EncryptedClientHelloKey struct {
// Config should be a marshalled ECHConfig associated with PrivateKey. This
// must match the config provided to clients byte-for-byte. The config
// should only specify the DHKEM(X25519, HKDF-SHA256) KEM ID (0x0020), the
// HKDF-SHA256 KDF ID (0x0001), and a subset of the following AEAD IDs:
// AES-128-GCM (0x0000), AES-256-GCM (0x0001), ChaCha20Poly1305 (0x0002).
Config [][byte](https://pkg.go.dev/builtin#byte)This part:
// AES-128-GCM (0x0000), AES-256-GCM (0x0001), ChaCha20Poly1305 (0x0002)
doesn't seem to match RFC 9180, and caused me some head scratching while troubleshooting this.
I believe the comment should be:
AES-128-GCM (0x0001), AES-256-GCM (0x0002), ChaCha20Poly1305 (0x0003)
As evidenced by the RFC and the actual code: https://cs.opensource.google/go/go/+/refs/tags/go1.24.0:src/crypto/internal/hpke/hpke.go;l=157-159
type AEADID uint16
const (
AEAD_AES_128_GCM = 0x0001
AEAD_AES_256_GCM = 0x0002
AEAD_ChaCha20Poly1305 = 0x0003
)
What did you expect to see?
- Less misleading error message
- A more descriptive error message to help pinpoint serialization problems. We are required to serialize the ECHConfig ourselves, but the Go standard library currently adds stringent requirements on some parts of the ECHConfig, so more detailed errors would be appreciated. Otherwise, we can write spec-compliant serialization code, but still have it fail with the crypto/tls package for unknown reasons.
- Godoc comment to have the correct AEAD IDs.
Thanks for adding ECH to Go 1.24! Caddy will soon ship with it.
I did get ECH working in Caddy tonight!
Go version
go version go1.24.0 linux/amd64
Output of
go envin your module/workspace:What did you do?
Implementing Encrypted ClientHello (server-side).
What did you see happen?
errMalformedECHConfig("tls: malformed ECHConfigList") is returned in at least 17 places, although most are errors parsingECHConfig, notECHConfigList.Additionally, this error is very vague. Since we have to serialize the ECHConfig ourselves, and crypto/tls adds extra requirements, any chance we could get a little more info as to what is wrong with it?
Also, the following godoc comment seems to have a mistake:
This part:
doesn't seem to match RFC 9180, and caused me some head scratching while troubleshooting this.
I believe the comment should be:
As evidenced by the RFC and the actual code: https://cs.opensource.google/go/go/+/refs/tags/go1.24.0:src/crypto/internal/hpke/hpke.go;l=157-159
What did you expect to see?
Thanks for adding ECH to Go 1.24! Caddy will soon ship with it.
I did get ECH working in Caddy tonight!