]> git.ipfire.org Git - thirdparty/openssl.git/commit
Encrypt the address validation token
authorAndrew Dinh <andrewd@openssl.org>
Thu, 12 Dec 2024 15:28:52 +0000 (09:28 -0600)
committerNeil Horman <nhorman@openssl.org>
Sat, 11 Jan 2025 21:02:29 +0000 (16:02 -0500)
commit7c20ae84fef1c62e05a8809463d5940c492a45f9
tree9ce4413d8aa12db1efa5d6aa975562bb85bf6aee
parent4c32f4a886b44f9edf532b61081c5b49f7f10393
Encrypt the address validation token

Store an EVP_CIPHER_CTX context with an ephemeral key set in port
and use it to encrypt/decrypt the validation token.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26165)
ssl/quic/quic_port.c
ssl/quic/quic_port_local.h
test/recipes/75-test_quicapi_data/ssltraceref-zlib.txt
test/recipes/75-test_quicapi_data/ssltraceref.txt