xvzcf / tls-interop-runner

Interoperability testing of TLS implementations.
Other
10 stars 13 forks source link

Add "ech-reject" test case for nss and cloudflare-go #36

Closed cjpatton closed 3 years ago

cjpatton commented 3 years ago

Partially addresses #27.

Adds a test case for exercising the ECH rejection path, with initial support for NSS and Cloudflare-Go.

In this test case, the client offers ECH with an invalid config, the server rejects, and the client aborts the connection with "ech_required" alert. They don't attempt to retry the connection with the retry configs.

Thanks to @kjacobs-moz for help getting the NSS client endpoint right!