search

google / conscrypt

Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.
Apache License 2.0
1.28k stars 273 forks source link

conscrypt + grease ( how to access boringssl features? ) #1084

Open ogolovanov opened 2 years ago

ogolovanov commented 2 years ago

Hi.

I am unable to find any information about how to enable grease feature via conscrypt.

In BoringSSL its done via SSL_CTX_set_grease_enabled: https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#SSL_CTX_set_grease_enabled

In general - how can i access BoringSSL features via conscrypt and configure ssl connection the way i want?

Thanks.

eighthave commented 1 year ago

There is no support yet for ECH features, I think that includes GREASE. For more info, see #1044

matt1309 commented 9 months ago

@eighthave @ogolovanov Is this still outstanding? I'm also looking for the feature, it seems to have been forgotten in other thread?

eighthave commented 9 months ago

ECH support is not complete, as far as I know, see https://github.com/google/conscrypt/pull/1044#issuecomment-1829358465