[issue37952] Add support for export_keying_material to SSL library

Hans-Christoph Steiner added the comment: I understand the frustrations here, but this is really not a place to vent, since that only harms everyone's interests. When a core maintainer voices concerns or questions, they need to be addressed. This goes for any project. I'll see if I can con

[issue37952] Add support for export_keying_material to SSL library

Christer Weinigel added the comment: Sorry about the venting, but it is kind of frustrating to spend months working on something with no feedback just to be told that it all was for nothing. But that's how it is. I'll just keep updating my path every now and then since I need it anyway and do

[issue37952] Add support for export_keying_material to SSL library

Change by Christian Heimes : -- nosy: -christian.heimes ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: http

[issue37952] Add support for export_keying_material to SSL library

Christian Heimes added the comment: Neither venting frustration at my expense nor emotional blackmail is going to increase the likeliness, that I will spend my limited personal time to review a patch for a new feature. Feel free to find another core dev who is willing to land and maintain yo

[issue37952] Add support for export_keying_material to SSL library

Christer Weinigel added the comment: Hi, unfortunately the maintainer of the openssl library in Python doesn't want to take my patch. He says that he doesn't want the burden of supporting more functions in the API. I'm a bit frustrated about the whole situation, I've redone my patch over and

[issue37952] Add support for export_keying_material to SSL library

Hans-Christoph Steiner added the comment: We're working on the HTTP Transport Auth draft (https://www.ietf.org/archive/id/draft-schinazi-httpbis-transport-auth-05.html) in the IETF that also needs this method. I would really love to see this land, any advice? If it is just a matter of upda

[issue37952] Add support for export_keying_material to SSL library

Change by Christer Weinigel : -- keywords: +patch pull_requests: +23991 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25255 ___ Python tracker __

[issue37952] Add support for export_keying_material to SSL library

Christer Weinigel added the comment: OpenSSL has a function to "SSL_export_keying_material" as described in RFC5705. This functionality is needed to be able to support a bunch of other protocols such as "Network Time Security for the Network Time Protocol" which has now become a proper RFC

[issue37952] Add support for export_keying_material to SSL library

Christer Weinigel added the comment: I'm doing an implementation of the NTS protocol for my customer Netnod: https://github.com/Netnod/nts-poc-python NTS is draft RFC on its way to become a standard: https://datatracker.ietf.org/doc/draft-ietf-ntp-using-nts-for-ntp/ NTS requires the export_

[issue37952] Add support for export_keying_material to SSL library

Christian Heimes added the comment: Could you please explain the purpose of the feature and why you want to expose the interface? What's the use case? As this is a new feature, Python 3.7 and 3.8 are out of scope. -- versions: -Python 3.7 ___ Pyt

[issue37952] Add support for export_keying_material to SSL library

New submission from Christer Weinigel : Add support for the export_keying_material function to the SSL library. Tested with Python 3.7.4 and Python master branch: https://github.com/wingel/cpython/tree/export_keying_material-3.7.4 https://github.com/wingel/cpython/tree/export_keying_material-m