mirror of
https://github.com/curl/curl.git
synced 2026-06-18 13:15:38 +03:00
50ffc359e9
This PR makes the wolfssl TLS backend work properly for PQC key exchanges. The following issues are fixed: * WOLFSSL_HAVE_KYBER is not present anymore in upstream wolfssl (for a long time actually), so it has no use and the ML-KEM functionality was never turned on properly. * Key share group selection (via --curves) is now handled via the generic wolfSSL_CTX_set1_groups_list() method instead of the prior wolfSSL_CTX_set1_curves_list() and the additonal PQC handling. This removes a lot of PQC related special handling and the behavior now matches the OpenSSL backend. * The default QUIC group setting has been removed. For QUIC, the key share as well as the list in the supported_groups extension is now handled all within wolfssl. This also supports --curves properly now. Closes #22030 |
||
|---|---|---|
| .. | ||
| apple.c | ||
| apple.h | ||
| cipher_suite.c | ||
| cipher_suite.h | ||
| gtls.c | ||
| gtls.h | ||
| hostcheck.c | ||
| hostcheck.h | ||
| keylog.c | ||
| keylog.h | ||
| mbedtls.c | ||
| mbedtls.h | ||
| openssl.c | ||
| openssl.h | ||
| rustls.c | ||
| rustls.h | ||
| schannel.c | ||
| schannel.h | ||
| schannel_int.h | ||
| schannel_verify.c | ||
| vtls.c | ||
| vtls.h | ||
| vtls_config.c | ||
| vtls_config.h | ||
| vtls_int.h | ||
| vtls_scache.c | ||
| vtls_scache.h | ||
| vtls_spack.c | ||
| vtls_spack.h | ||
| wolfssl.c | ||
| wolfssl.h | ||
| x509asn1.c | ||
| x509asn1.h | ||