Add support for TLS 1.3 Early Data
Open
Nobody has claimed this yet.
waiting-for-bindings
- Dominant language
- Python
- Stars
- 944
- Forks
- 440
- Avg merge
- 1d 6h
- Merged PRs (30d)
- 6
Description
Deferred: we can't do this until cryptography supports OpenSSL 1.1.1.
It would be very helpful for applications like Twisted to have access to TLS 1.3 Early Data (see this Twisted ticket). To do that PyOpenSSL needs to expose a few functions:
SSL_SESSION_get_max_early_dataSSL_write_early_dataSSL_read_early_dataSSL_CTX_set_max_early_data
It'd be good to add this support to PyOpenSSL when it becomes possible.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by confirming that the cryptography dependency supports OpenSSL 1.1.1 and TLS 1.3 Early Data; the issue names no files or tests. The work is done when PyOpenSSL exposes SSL_SESSION_get_max_early_data, SSL_write_early_data, SSL_read_early_data, and SSL_CTX_set_max_early_data.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100