Re: ECH support when curl is using DoH

2023-09-22 Thread Stephen Farrell via curl-library
Hiya, On 15/09/2023 16:14, Daniel Stenberg wrote: On Thu, 14 Sep 2023, Stephen Farrell wrote: I've only gotten this working on a localhost test so far but reckon I should have curl+ECH working with either OpenSSL or WolfSSL in the next week or so. Once I'm there, is it worth making a PR for

Re: ECH support when curl is using DoH

2023-09-15 Thread Stephen Farrell via curl-library
Hiya, On 15/09/2023 16:14, Daniel Stenberg wrote: On Thu, 14 Sep 2023, Stephen Farrell wrote: I've only gotten this working on a localhost test so far but reckon I should have curl+ECH working with either OpenSSL or WolfSSL in the next week or so. Once I'm there, is it worth making a PR for

Re: ECH support when curl is using DoH

2023-09-15 Thread Daniel Stenberg via curl-library
On Thu, 14 Sep 2023, Stephen Farrell wrote: I've only gotten this working on a localhost test so far but reckon I should have curl+ECH working with either OpenSSL or WolfSSL in the next week or so. Once I'm there, is it worth making a PR for curl on github to get feedback Sure, why not?! --

Re: ECH support when curl is using DoH

2023-09-14 Thread Stephen Farrell via curl-library
Hiya, On 14/09/2023 09:58, Daniel Stenberg wrote: On Thu, 14 Sep 2023, Stephen Farrell wrote: Question: is this list still ok to use for issues if those are related to WolfSSL in this context or should those be handled otherwise? If those issues are suspected problems or issues in wolfSSL r

Re: ECH support when curl is using DoH

2023-09-14 Thread Daniel Stenberg via curl-library
On Thu, 14 Sep 2023, Stephen Farrell wrote: Question: is this list still ok to use for issues if those are related to WolfSSL in this context or should those be handled otherwise? If those issues are suspected problems or issues in wolfSSL rather than in curl, I propose you submit them as iss

Re: ECH support when curl is using DoH

2023-09-13 Thread Stephen Farrell via curl-library
On 13/09/2023 16:13, Stephen Farrell via curl-library wrote: Great, thanks. I found the relevant APIs so will try it out So I now have a build of curl+WolfSSL+ECH that can take an ECHConfig from the command line and that works for the Cloudflare server but not one of for our DEfO servers. Tha

Re: Re: ECH support when curl is using DoH

2023-09-13 Thread Stephen Farrell via curl-library
On 13/09/2023 14:58, Daniel Stenberg wrote: On Wed, 13 Sep 2023, Stephen Farrell via curl-library wrote: Any pointers to how WolfSSL supports ECH appreciated. This blog post contains some info:  https://www.wolfssl.com/encrypted-client-hello-ech-now-supported-wolfssl/ Great, thanks. I f

Re: ECH support when curl is using DoH

2023-09-13 Thread Daniel Stenberg via curl-library
On Wed, 13 Sep 2023, Stephen Farrell via curl-library wrote: Any pointers to how WolfSSL supports ECH appreciated. This blog post contains some info: https://www.wolfssl.com/encrypted-client-hello-ech-now-supported-wolfssl/ -- / daniel.haxx.se | Commercial curl support up to 24x7 is avai

Re: ECH support when curl is using DoH

2023-09-13 Thread Stephen Farrell via curl-library
Hiya, (Apologies for replying to myself, I didn't get Daniel's reply yet, likely due to the fact that our dept now use outlook instead of self-hosting our mail servers;-( If that persists, I'll probably subscribe to the list via another email addr. I saw the response in the archive though, so...

Re: ECH support when curl is using DoH

2023-09-13 Thread Daniel Stenberg via curl-library
On Wed, 13 Sep 2023, Stephen Farrell via curl-library wrote: Lovely to see the progress! - Only the first HTTPS RR value retrieved is actually processed as described at [2]. That could be extended in future, though picking the "right" HTTPS RR could be non- trivial if multiple RRs are publishe

ECH support when curl is using DoH

2023-09-12 Thread Stephen Farrell via curl-library
Hiya, Building on work done earlier by Niall O'Reilly I've recently updated our curl fork to add support for ECH when curl makes use of DoH. (I'll send a separate mail asking about ECH when curl is not using DoH.) As background, we're working on this as part of the OTF- funded DEfO project wher