Re: Log field suggestion: cqssg for client TLS group name

2025-05-26 Thread Masaori Koshiba
>From my understanding, "elliptic_curves" are used in the past, but TLS 1.3 starts calling it as "group" for both ECDHE and DHE.[*1] If the proposed `cqssg` treats `cqssu` as a subset, that matches this naming change. I'd also suggest making `cqssu` as deprecated. For implementation, please note t

Log field suggestion: cqssg for client TLS group name

2025-05-26 Thread Brian Neradt
Hi dev@trafficserver.apache.org, We use cqssu to log the elliptic curve value for our client side TLS connections. We noticed that when testing OpenSSL 3.5 and using a post quantum curve from a curl client, namely X25519MLKEM768, that cqssu would log `-` as a value. I was curious about this and no