[GitHub] [trafficserver] maskit opened a new issue #7498: valid_tls_versions_in is not available with BoringSSL

[GitBox <gi...@apache.org>]

maskit opened a new issue #7498:
URL: https://github.com/apache/trafficserver/issues/7498


   `valid_tls_versions_in` is not available if ATS is built with BoringSSL. And autest (tls_client_versions) fails due to the unavailability.
   
   The documentation do say the key is only valid for recent OpenSSL, but it doesn't justify autest failure.
   
   We may be able to make it available for BoringSSL by using `SSL_CTX_set_select_certificate_cb`.
   
   > SSL_CTX_set_select_certificate_cb sets a callback that is called before most ClientHello processing and before the decision whether to resume a session is made. The callback may inspect the ClientHello and configure the connection. See ssl_select_cert_result_t for details of the return values.
   
   If we cannot provide the feature for BoringSSL, the test should be skipped.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [trafficserver] randall closed issue #7498: valid_tls_versions_in is not available with BoringSSL

[GitBox <gi...@apache.org>]

randall closed issue #7498:
URL: https://github.com/apache/trafficserver/issues/7498


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org