openssl/ssl
Andrew Dinh 2b271d0f85 Augment RETRY validation token
Adds fields to the QUIC RETRY packet validation token:
timestamp, remote_addr, odcid, & rscid.

Also adds functionality to validate the token once returned by the client.

Note that this does not encrypt the token yet.

Also check that the RSCID stored in the RETRY validation
token matches the DCID in the header.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26048)
2025-02-17 11:27:33 -05:00
..
quic Augment RETRY validation token 2025-02-17 11:27:33 -05:00
record libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
rio SSL_poll(): Handle blocking with no poll items 2025-02-17 11:27:33 -05:00
statem libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
bio_ssl.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
build.info Enable the quic-tls API to work, even in the case of no-quic 2025-02-11 17:17:10 +00:00
d1_lib.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
d1_msg.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
d1_srtp.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
methods.c
pqueue.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
priority_queue.c Copyright year updates 2024-09-05 09:35:49 +02:00
s3_enc.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
s3_lib.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
s3_msg.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_asn1.c RFC7250 (RPK) support 2023-03-28 13:49:54 -04:00
ssl_cert.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_cert_comp.c Minor fixes 2025-02-17 11:27:32 -05:00
ssl_cert_table.h Make ssl_cert_info read-only 2023-11-27 07:51:33 +00:00
ssl_ciph.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_conf.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_err.c make update 2025-02-17 11:27:32 -05:00
ssl_err_legacy.c
ssl_init.c Ensure WSAStartup() before calling WSASocketA() 2025-02-17 11:27:33 -05:00
ssl_lib.c QUIC Concurrency API: Various minor fixes 2025-02-17 11:27:32 -05:00
ssl_local.h QUIC APL: Refine domain flag handling 2025-02-17 11:27:32 -05:00
ssl_mcnf.c Copyright year updates 2024-09-05 09:35:49 +02:00
ssl_rsa.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_rsa_legacy.c Check file name for not being NULL before opening it 2024-09-26 20:35:26 +02:00
ssl_sess.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_stat.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
ssl_txt.c Copyright year updates 2024-09-05 09:35:49 +02:00
ssl_utst.c Remove the old buffer management code 2022-10-20 14:39:33 +01:00
sslerr.h Add an API for other QUIC stacks to use our TLS implementation 2025-02-11 17:17:10 +00:00
t1_enc.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
t1_lib.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
t1_trce.c Minor updates 2025-02-17 11:27:32 -05:00
tls13_enc.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
tls_depr.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00
tls_srp.c libssl: Move SSL object unwrapping macros to separate header 2025-02-17 11:27:32 -05:00