[ech] looking for comments on my current APIs for ECH

Stephen Farrell stephen.farrell at cs.tcd.ie
Mon Dec 19 22:43:54 UTC 2022


Hi all,

Hopefully enough people are subscribed here to get useful
feedback on this over the holidays.

I've documented the APIs I've developed for ECH in what I
hope is a reviewable way.

The main POD file is [1] (header at [2], an html version
at [3]).

There are also command line additions to s_client [4] and
s_server [5] and a new ech option for the minimal bits of
key management needed [6] (from the library).

This stuff does work in my current build, but please don't
yet look far into the implementation of these APIs as I have
a pile of stuff to do there yet. (IOW, there's code there I
know you'll hate;-)

Once these APIs seem ok, I plan to re-do the integrations
with the latest versions of curl, nginx, apache2, lighttpd
and haproxy. (The APIs changes since I last did that aren't
so far major, mostly considering stuff I learned as part of
the HPKE PR work, so that oughtn't take long.)

Anyway, be great to get comments on this API stuff. If
putting it in some other form makes it easier to review, be
happy to try do that.

Thanks,
S.

[1] 
https://github.com/sftcd/openssl/blob/ECH-draft-13c/doc/man3/SSL_ech_set1_echconfig.pod
[2] 
https://github.com/sftcd/openssl/blob/ECH-draft-13c/include/openssl/ech.h
[3] https://down.dsg.cs.tcd.ie/misc/SSL_ech_set1_echconfig.html
[4] 
https://github.com/sftcd/openssl/blob/ECH-draft-13c/doc/man1/openssl-s_client.pod.in
[5] 
https://github.com/sftcd/openssl/blob/ECH-draft-13c/doc/man1/openssl-s_server.pod.in
[6] 
https://github.com/sftcd/openssl/blob/ECH-draft-13c/doc/man1/openssl-ech.pod.in
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x5AB2FAF17B172BEA.asc
Type: application/pgp-keys
Size: 5564 bytes
Desc: OpenPGP public key
URL: <https://mta.openssl.org/pipermail/ech/attachments/20221219/d5d51979/attachment.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://mta.openssl.org/pipermail/ech/attachments/20221219/d5d51979/attachment.sig>


More information about the ech mailing list