]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 744a775) | patch
MEDIUM: ech: implement a lighter ECH feature for AWS-LC
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 31 Jul 2026 15:59:46 +0000 (15:59 +0000)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 3 Aug 2026 12:42:31 +0000 (14:42 +0200)
commitdcc738bdfb297afe7c81703ee416c54d10838544
treed0608e3abca6bb575b9f8460246079a643475df5tree | snapshot
parent744a7751452d9dc387254a879203a3a36e895b6dcommit | diff
MEDIUM: ech: implement a lighter ECH feature for AWS-LC

This patch implements ECH with AWS-LC. AWS-LC supports a different ECH
API than OpenSSL 4.0.

AWS-LC does not implement an API to load a PEM ECH file, the ECHCONFIG
section is parsed manually using PEM_read_bio() to feed the SSL_ECH_KEYS
object.

Runtime ECH store management ('show/add/set/del ssl ech') and ECH
status/outer-SNI reporting  are disabled under AWS-LC for now.

Should fix issue #3333.
doc/configuration.txt diff | blob | history
doc/management.txt diff | blob | history
include/haproxy/ech.h diff | blob | history
src/ech.c diff | blob | history
haproxy upstream