tls: expose keying material exporter to network and http filters
Open
enhancement
help wanted
- Dominant language
- C++
- Stars
- 28.9k
- Forks
- 5.6k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 430
Description
This allows filters to implement protocols that require application level secret agreement, e.g. origin bound certificates and token binding.
* [rfc5705: Keying Material Exporters for TLS](https://tools.ietf.org/html/rfc5705)
* [Boring ssl function](https://boringssl.googlesource.com/boringssl/+/5f001d142302910ac0c0534dd7d6f2526bc2ed31/include/openssl/ssl.h#1523)
Contributor guide
Assessment
This issue has not been assessed yet.