Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DTLS 1.3 support #586

Merged
merged 10 commits into from
Dec 13, 2024
Merged

Add DTLS 1.3 support #586

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
e38fea8
First cut at DTLS1.3 tracker
baentsch Dec 9, 2024
d33f60d
exclude non-applicable CI
baentsch Dec 9, 2024
fbc2b3a
add separate DTLS object creation and testing
baentsch Dec 9, 2024
8ced911
better error checks
baentsch Dec 9, 2024
bd4148d
add feature branch warning [skip ci]
baentsch Dec 9, 2024
f4c93cf
formatting fixed
baentsch Dec 9, 2024
fc258ca
enables conditional use of DTLS1.3
baentsch Dec 10, 2024
9ad45e4
fix formatting
baentsch Dec 10, 2024
95efe51
correct retest after code regen
baentsch Dec 10, 2024
9d9e11c
remove DTLS from CCI
baentsch Dec 10, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/linux.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,8 +73,8 @@ jobs:
export LIBOQS_SRC_DIR=`pwd`/liboqs && \
! pip3 install -r oqs-template/requirements.txt 2>&1 | grep ERROR && \
python3 oqs-template/generate.py
- name: Full re-build
run: rm -rf _build && ./scripts/fullbuild.sh
- name: Full re-build & test
run: rm -rf _build && OPENSSL_BRANCH=${{ matrix.ossl-branch }} LIBOQS_BRANCH=main OQS_LIBJADE_BUILD=${{ matrix.libjade-build }} ./scripts/fullbuild.sh && ./scripts/runtests.sh
baentsch marked this conversation as resolved.
Show resolved Hide resolved
- name: Build .deb install package
run: cpack -C DebPack
working-directory: _build
Expand Down
3 changes: 1 addition & 2 deletions .github/workflows/windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,7 @@ jobs:
set-safe-directory: true
repository: openssl/openssl
path: openssl
# TODO: Revert ref tag once openssl master doesn't crash any more
ref: openssl-3.3.0
ref: master
- name: checkout liboqs
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # pin@v4
with:
Expand Down
4 changes: 2 additions & 2 deletions oqs-template/oqsprov/oqsprov_capabilities.c/group_assignments.fragment
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{% for kem in config['kems'] %}
{ {{ kem['nid'] }}, {{ kem['bit_security'] }}, TLS1_3_VERSION, 0, -1, -1, 1 },
{ {{ kem['nid'] }}, {{ kem['bit_security'] }}, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1 },
{% for hybrid in kem['hybrids'] %}
{ {{ hybrid['nid'] }}, {{ kem['bit_security'] }}, TLS1_3_VERSION, 0, -1, -1, 1 },
{ {{ hybrid['nid'] }}, {{ kem['bit_security'] }}, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1 },
{%- endfor %}
{%- endfor %}

111 changes: 58 additions & 53 deletions oqsprov/oqsprov_capabilities.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,11 @@
// internal, but useful OSSL define:
#define OSSL_NELEM(x) (sizeof(x) / sizeof((x)[0]))

// enables DTLS1.3 testing even before available in openssl master:
#if !defined(DTLS1_3_VERSION)
#define DTLS1_3_VERSION 0xFEFC
#endif

#include "oqs_prov.h"

typedef struct oqs_group_constants_st {
Expand All @@ -35,77 +40,77 @@ typedef struct oqs_group_constants_st {
static OQS_GROUP_CONSTANTS oqs_group_list[] = {
// ad-hoc assignments - take from OQS generate data structures
///// OQS_TEMPLATE_FRAGMENT_GROUP_ASSIGNMENTS_START
{65024, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{65024, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F00, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F80, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{65025, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F00, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F80, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{65025, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F01, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F81, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{65026, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F01, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F81, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{65026, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F02, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F82, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0203, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F02, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F82, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0203, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F03, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F83, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0204, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F03, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F83, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0204, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F04, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0205, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F04, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0205, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F05, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x023A, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F05, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x023A, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F3A, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F39, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x023C, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F3A, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F39, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x023C, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F3C, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F90, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x6399, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x639A, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x023D, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F3C, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F90, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x6399, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x639A, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x023D, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F3D, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{512, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F3D, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{512, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F4B, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FB6, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{513, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F4B, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FB6, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{513, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F4C, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FB7, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x11ec, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x11eb, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{514, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F4C, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FB7, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x11ec, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x11eb, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{514, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F4D, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F4E, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0241, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F4D, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2F4E, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0241, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F41, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FAE, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0242, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F41, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FAE, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0242, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F42, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FAF, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0243, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F42, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FAF, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0243, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F43, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0244, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F43, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0244, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F44, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FB0, 128, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0245, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F44, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FB0, 128, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0245, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F45, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2FB1, 192, TLS1_3_VERSION, 0, -1, -1, 1},
{0x0246, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F45, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x2FB1, 192, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
{0x0246, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},

{0x2F46, 256, TLS1_3_VERSION, 0, -1, -1, 1},
{0x2F46, 256, TLS1_3_VERSION, 0, DTLS1_3_VERSION, 0, 1},
///// OQS_TEMPLATE_FRAGMENT_GROUP_ASSIGNMENTS_END
};

Expand Down
1 change: 1 addition & 0 deletions scripts/fullbuild.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@
# EnvVar OQS_ALGS_ENABLED: If set, defines OQS algs to be enabled, e.g., "STD"
# EnvVar OPENSSL_INSTALL: If set, defines (binary) OpenSSL installation to use
# EnvVar OPENSSL_BRANCH: Defines branch/release of openssl; if set, forces source-build of OpenSSL3
# Setting this to feature/dtls-1.3 enables build&test of all PQ algs using DTLS1.3 feature branch
# EnvVar liboqs_DIR: If set, needs to point to a directory where liboqs has been installed to

if [[ "$OSTYPE" == "darwin"* ]]; then
Expand Down
28 changes: 24 additions & 4 deletions test/oqs_test_groups.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ char *test_mk_file_path(const char *dir, const char *file) {
return full_file;
}

static int test_oqs_groups(const char *group_name) {
static int test_oqs_groups(const char *group_name, int dtls_flag) {
SSL_CTX *cctx = NULL, *sctx = NULL;
SSL *clientssl = NULL, *serverssl = NULL;
int ret = 1, testresult = 0;
Expand All @@ -42,13 +42,15 @@ static int test_oqs_groups(const char *group_name) {
printf("Not testing disabled algorithm %s.\n", group_name);
return 1;
}
testresult = create_tls1_3_ctx_pair(libctx, &sctx, &cctx, cert, privkey);
testresult =
create_tls1_3_ctx_pair(libctx, &sctx, &cctx, cert, privkey, dtls_flag);
if (!testresult) {
ret = -1;
goto err;
}

testresult = create_tls_objects(sctx, cctx, &serverssl, &clientssl);
testresult =
create_tls_objects(sctx, cctx, &serverssl, &clientssl, dtls_flag);

if (!testresult) {
ret = -2;
Expand Down Expand Up @@ -94,7 +96,7 @@ static int test_group(const OSSL_PARAM params[], void *data) {

char *group_name = OPENSSL_strdup(p->data);

ret = test_oqs_groups(group_name);
ret = test_oqs_groups(group_name, 0);

if (ret >= 0) {
fprintf(stderr,
Expand All @@ -110,6 +112,24 @@ static int test_group(const OSSL_PARAM params[], void *data) {
(*errcnt)++;
}

#ifdef DTLS1_3_VERSION
ret = test_oqs_groups(group_name, 1);

if (ret >= 0) {
fprintf(stderr,
cGREEN " DTLS-KEM handshake test succeeded: %s" cNORM "\n",
group_name);
} else {
fprintf(stderr,
cRED
" DTLS-KEM handshake test failed: %s, return code: %d" cNORM
"\n",
group_name, ret);
ERR_print_errors_fp(stderr);
(*errcnt)++;
}
#endif

err:
OPENSSL_free(group_name);
return ret;
Expand Down
29 changes: 24 additions & 5 deletions test/oqs_test_tlssig.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ static char *configfile = NULL;
static char *certsdir = NULL;

#ifdef OSSL_CAPABILITY_TLS_SIGALG_NAME
static int test_oqs_tlssig(const char *sig_name) {
static int test_oqs_tlssig(const char *sig_name, int dtls_flag) {
SSL_CTX *cctx = NULL, *sctx = NULL;
SSL *clientssl = NULL, *serverssl = NULL;
int ret = 1, testresult = 0;
Expand Down Expand Up @@ -53,15 +53,16 @@ static int test_oqs_tlssig(const char *sig_name) {
goto err;
}

testresult =
create_tls1_3_ctx_pair(libctx, &sctx, &cctx, certpath, privkeypath);
testresult = create_tls1_3_ctx_pair(libctx, &sctx, &cctx, certpath,
privkeypath, dtls_flag);

if (!testresult) {
ret = -1;
goto err;
}

testresult = create_tls_objects(sctx, cctx, &serverssl, &clientssl);
testresult =
create_tls_objects(sctx, cctx, &serverssl, &clientssl, dtls_flag);

if (!testresult) {
ret = -2;
Expand Down Expand Up @@ -109,7 +110,7 @@ static int test_signature(const OSSL_PARAM params[], void *data) {
if (sigalg_name == NULL)
return 0;

ret = test_oqs_tlssig(sigalg_name);
ret = test_oqs_tlssig(sigalg_name, 0);

if (ret >= 0) {
fprintf(stderr,
Expand All @@ -125,6 +126,24 @@ static int test_signature(const OSSL_PARAM params[], void *data) {
(*errcnt)++;
}

#ifdef DTLS1_3_VERSION
ret = test_oqs_tlssig(sigalg_name, 1);

if (ret >= 0) {
fprintf(stderr,
cGREEN " DTLS-SIG handshake test succeeded: %s" cNORM "\n",
sigalg_name);
} else {
fprintf(stderr,
cRED
" DTLS-SIG handshake test failed: %s, return code: %d" cNORM
"\n",
sigalg_name, ret);
ERR_print_errors_fp(stderr);
(*errcnt)++;
}
#endif

err:
OPENSSL_free(sigalg_name);
return ret;
Expand Down
47 changes: 37 additions & 10 deletions test/tlstest_helpers.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,23 +43,39 @@ int create_cert_key(OSSL_LIB_CTX *libctx, char *algname, char *certfilename,
}
/* end steal */
int create_tls1_3_ctx_pair(OSSL_LIB_CTX *libctx, SSL_CTX **sctx, SSL_CTX **cctx,
char *certfile, char *privkeyfile) {
char *certfile, char *privkeyfile, int dtls_flag) {
SSL_CTX *serverctx = NULL, *clientctx = NULL;

if (sctx == NULL || cctx == NULL)
goto err;

serverctx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
clientctx = SSL_CTX_new_ex(libctx, NULL, TLS_client_method());
if (dtls_flag) {
serverctx = SSL_CTX_new_ex(libctx, NULL, DTLS_server_method());
clientctx = SSL_CTX_new_ex(libctx, NULL, DTLS_client_method());
} else {
serverctx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
clientctx = SSL_CTX_new_ex(libctx, NULL, TLS_client_method());
}

if (serverctx == NULL || clientctx == NULL)
goto err;

SSL_CTX_set_options(serverctx, SSL_OP_ALLOW_CLIENT_RENEGOTIATION);
SSL_CTX_set_min_proto_version(serverctx, TLS1_3_VERSION);
SSL_CTX_set_max_proto_version(serverctx, TLS1_3_VERSION);
SSL_CTX_set_min_proto_version(clientctx, TLS1_3_VERSION);
SSL_CTX_set_max_proto_version(clientctx, TLS1_3_VERSION);
if (dtls_flag) {
#ifdef DTLS1_3_VERSION
if (!SSL_CTX_set_min_proto_version(serverctx, DTLS1_3_VERSION) ||
!SSL_CTX_set_max_proto_version(serverctx, DTLS1_3_VERSION) ||
!SSL_CTX_set_min_proto_version(clientctx, DTLS1_3_VERSION) ||
!SSL_CTX_set_max_proto_version(clientctx, DTLS1_3_VERSION))
#endif
goto err;
} else {
if (!SSL_CTX_set_min_proto_version(serverctx, TLS1_3_VERSION) ||
!SSL_CTX_set_max_proto_version(serverctx, TLS1_3_VERSION) ||
!SSL_CTX_set_min_proto_version(clientctx, TLS1_3_VERSION) ||
!SSL_CTX_set_max_proto_version(clientctx, TLS1_3_VERSION))
goto err;
}

if (!SSL_CTX_use_certificate_file(serverctx, certfile, SSL_FILETYPE_PEM))
goto err;
Expand All @@ -81,7 +97,7 @@ int create_tls1_3_ctx_pair(OSSL_LIB_CTX *libctx, SSL_CTX **sctx, SSL_CTX **cctx,
}

int create_tls_objects(SSL_CTX *serverctx, SSL_CTX *clientctx, SSL **sssl,
SSL **cssl) {
SSL **cssl, int use_dgram) {
SSL *serverssl = NULL, *clientssl = NULL;
BIO *s_to_c_bio = NULL, *c_to_s_bio = NULL;

Expand All @@ -94,8 +110,19 @@ int create_tls_objects(SSL_CTX *serverctx, SSL_CTX *clientctx, SSL **sssl,
if (serverssl == NULL || clientssl == NULL)
goto err;

s_to_c_bio = BIO_new(BIO_s_mem());
c_to_s_bio = BIO_new(BIO_s_mem());
if (use_dgram) {
#if (OPENSSL_VERSION_PREREQ(3, 2))
s_to_c_bio = BIO_new(BIO_s_dgram_mem());
c_to_s_bio = BIO_new(BIO_s_dgram_mem());
#else
fprintf(stderr, "No DGRAM memory supported in this OpenSSL version.\n");
ERR_print_errors_fp(stderr);
goto err;
#endif
} else {
s_to_c_bio = BIO_new(BIO_s_mem());
c_to_s_bio = BIO_new(BIO_s_mem());
}

if (s_to_c_bio == NULL || c_to_s_bio == NULL)
goto err;
Expand Down
4 changes: 2 additions & 2 deletions test/tlstest_helpers.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@ int create_cert_key(OSSL_LIB_CTX *libctx, char *algname, char *certfilename,
char *privkeyfilename);

int create_tls1_3_ctx_pair(OSSL_LIB_CTX *libctx, SSL_CTX **sctx, SSL_CTX **cctx,
char *certfile, char *privkeyfile);
char *certfile, char *privkeyfile, int dtls_flag);

int create_tls_objects(SSL_CTX *serverctx, SSL_CTX *clientctx, SSL **sssl,
SSL **cssl);
SSL **cssl, int use_dgram);

int create_tls_connection(SSL *serverssl, SSL *clientssl, int want);
Loading