Re: [TLS] multi-identity support in RFC 8446

2023-03-03 Thread Chuck Lever III
Hello Andrei - > On Mar 2, 2023, at 12:47 PM, Andrei Popov wrote: > >> I don't have details, but the NVMe/TCP specification suggests that it can >> make use of multiple PSK identities during a TLS handshake. > From my read of NVMe spec, it's one PSK/identity per TLS connection: > > "8.13.5.9 G

Re: [TLS] multi-identity support in RFC 8446

2023-03-02 Thread Andrei Popov
per host-controller connection. Please correct me if I mis-interpret the NVMe spec, Cheers, Andrei -Original Message- From: TLS On Behalf Of Chuck Lever III Sent: Thursday, March 2, 2023 6:32 AM To: Peter Gutmann Cc: tls@ietf.org Subject: [EXTERNAL] Re: [TLS] multi-identity suppo

Re: [TLS] multi-identity support in RFC 8446

2023-03-02 Thread Chuck Lever III
> On Mar 1, 2023, at 11:29 PM, Peter Gutmann wrote: > > Chuck Lever III writes: > >> We're implementing TLSv1.3 support for PSK and note there is a capability in >> the PSK extension described in S 4.2.11 for sending a list of identities. We >> don't find support for a list of alternate iden

Re: [TLS] multi-identity support in RFC 8446

2023-03-01 Thread Benjamin Kaduk
On Thu, Mar 02, 2023 at 04:29:11AM +, Peter Gutmann wrote: > Chuck Lever III writes: > > >We're implementing TLSv1.3 support for PSK and note there is a capability in > >the PSK extension described in S 4.2.11 for sending a list of identities. We > >don't find support for a list of alternate

Re: [TLS] multi-identity support in RFC 8446

2023-03-01 Thread Peter Gutmann
Chuck Lever III writes: >We're implementing TLSv1.3 support for PSK and note there is a capability in >the PSK extension described in S 4.2.11 for sending a list of identities. We >don't find support for a list of alternate identities implemented in user >space TLS libraries such as GnuTLS or Ope

Re: [TLS] multi-identity support in RFC 8446

2023-03-01 Thread Andrei Popov
ay, March 1, 2023 6:44 AM To: tls@ietf.org Subject: [EXTERNAL] [TLS] multi-identity support in RFC 8446 [Some people who received this message don't often get email from chuck.le...@oracle.com. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Hi- We're impleme

[TLS] multi-identity support in RFC 8446

2023-03-01 Thread Chuck Lever III
Hi- We're implementing TLSv1.3 support for PSK and note there is a capability in the PSK extension described in S 4.2.11 for sending a list of identities. We don't find support for a list of alternate identities implemented in user space TLS libraries such as GnuTLS or OpenSSL. Is there a known re