1678079 - Add PSM support for TLS Encrypted Client Hello

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement)

Description

[Kevin Jacobs [:kjacobs]]

Now that NSS supports ECH (draft-ietf-tls-esni-08), we need a few changes to PSM to use it from the browser. ECH replaces the existing ESNI (draft -02) implementation.

This bug tracks the PSM changes and associated tests.

Comment 1

[Kevin Jacobs [:kjacobs]]

Attachment: Bug 1678079 - Add PSM support and xpcshell tests for ECH. r?keeler,kershaw

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e7c03faf2880
Add PSM support and xpcshell tests for ECH. r=keeler,kershaw

Comment 3

[Razvan Maries]

Backed out for perma failures.

Push with failures: https://treeherder.mozilla.org/jobs?repo=autoland&selectedTaskRun=bTbBC8kTTXCGEuIevZd_DQ.1&resultStatus=pending%2Crunning%2Csuccess%2Ctestfailed%2Cbusted%2Cexception&searchStr=linux%2C18.04%2Cx64%2Ctsan%2Copt%2Cxpcshell%2Ctests%2Ctest-linux1804-64-tsan%2Fopt-xpcshell-e10s%2Cx5&revision=ee2fd8e8a5c8cc03918cf9a4e52644bc2c94100c

Log: https://treeherder.mozilla.org/logviewer?job_id=323520911&repo=autoland&lineNumber=3071

Backout: https://hg.mozilla.org/integration/autoland/rev/ee7cd95a414c7307a137c07e0c367c336a74a737

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0a1628c1f9e4
Add PSM support and xpcshell tests for ECH. r=keeler,kershaw

Comment 5

[Bogdan Tara[:bogdan_tara | bogdant]]

https://hg.mozilla.org/mozilla-central/rev/0a1628c1f9e4