Usage example:
mkdir dbdir && cd dbdir
certutil -N -d .
certutil -S -s "CN=ech-public.com" -n ech-public.com -x -t "C,C,C" -m 1234 -d .
certutil -S -s "CN=ech-private-backend.com" -n ech-private-backend.com -x -t "C,C,C" -m 2345 -d .
../dist/Debug/bin/selfserv -a ech-public.com -a ech-private-backend.com -n ech-public.com -n ech-private-backend.com -p 8443 -d dbdir/ -X publicname:ech-public.com
(Copy echconfig from selfserv output and paste into the below command)
../dist/Debug/bin/tstclnt -D -p 8443 -v -A tests/ssl/sslreq.dat -h ech-private-backend.com -o -N <echconfig> -v
Details
Details
- Reviewers
mt - Commits
- rNSS92dcda94c1d4: Bug 1681585 - Add ECH support to selfserv. r=mt
- Bugzilla Bug ID
- 1681585
Diff Detail
Diff Detail
- Repository
- rNSS nss
Event Timeline
Comment Actions
For the interop runner, we need to take the HPKE keypair and echconfigs as input rather than generating them. I'm going to revise this accordingly.