Re: [PATCH] Add ssl_client_tls_bind variable

2023-12-15 Thread Rob Casey
Very interesting. Thanks for these links Maxim. I would actually favour Steffen's patch over my own for the completeness of exposing both tls-unique and tls-server-end-point. I would note from the second link however that this patch was abandoned due to the limited application of channel binding w

Re: [PATCH] Add ssl_client_tls_bind variable

2023-12-15 Thread Maxim Dounin
Hello! On Fri, Dec 15, 2023 at 06:02:45PM +1100, Rob Casey wrote: > First time caller, long time listener. > > This patch introduces the variable $ssl_client_tls_bind which provides the > last Finished message returned by the OpenSSL SSL_get_peer_finished() > function. The value returned by this

[PATCH] Add ssl_client_tls_bind variable

2023-12-14 Thread Rob Casey
First time caller, long time listener. This patch introduces the variable $ssl_client_tls_bind which provides the last Finished message returned by the OpenSSL SSL_get_peer_finished() function. The value returned by this function may be used in TLS channel binding operations as described in RFC 59