curl/lib/vtls
Stefan Eissing 3c007d6351
openssl+ech: workaround for insecure handshakes
OpenSSL 4.0.0-dev supports ECH with one flaw. If peer verification
is not enabled, it will report SSL_ECH_STATUS_BAD_NAME on the ECH
status.

Provide a workaround in libcurl that checks the inner name used in
ECH was the peer's hostname, both verify peer and host are disabled
and then accept the BAD_NAME without failing the connect.

Fixes #20655
Reported-by: Dexter Gerig
Closes #20821
2026-03-06 22:42:40 +01:00
..
apple.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
apple.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
gtls.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
gtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
keylog.c clang-tidy: enable readability-math-missing-parentheses, adjust code 2026-02-23 18:57:40 +01:00
keylog.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
mbedtls.c stop using the word 'just' 2026-03-03 15:30:22 +01:00
mbedtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
openssl.c openssl+ech: workaround for insecure handshakes 2026-03-06 22:42:40 +01:00
openssl.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
rustls.c clang-tidy: silence more minor issues found by v22 2026-02-28 13:16:54 +01:00
rustls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel.c schannel: fix UAF in client cert store thumbprint handling 2026-03-03 22:14:26 +01:00
schannel.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_verify.c tidy-up: miscellaneous 2026-02-25 14:44:56 +01:00
vtls.c clang-tidy: fix issues found with build-fuzzing 2026-03-01 00:04:18 +01:00
vtls.h stop using the word 'just' 2026-03-03 15:30:22 +01:00
vtls_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_scache.c stop using the word 'just' 2026-03-03 15:30:22 +01:00
vtls_scache.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_spack.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_spack.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
wolfssl.c stop using the word 'just' 2026-03-03 15:30:22 +01:00
wolfssl.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
x509asn1.c stop using the word 'just' 2026-03-03 15:30:22 +01:00
x509asn1.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00