pep/xmpp-rs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

sasl: Add tls-exporter channel binding

Browse source 
This channel binding type is defined in RFC 9266 and is required to
support channel binding on TLS 1.3.
This commit is contained in:
Emmanuel Gil Peyrot 2023-10-25 19:20:02 +02:00
parent 115edf6f25
commit b5aa36b72c
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
sasl/src/common/mod.rs
View file

@ -168,8 +168,10 @@ pub enum ChannelBinding {
None,
/// Advertise that the client does not think the server supports channel binding.
Unsupported,
/// p=tls-unique channel binding data.
/// p=tls-unique channel binding data (for TLS 1.2).
TlsUnique(Vec<u8>),
/// p=tls-exporter channel binding data (for TLS 1.3).
TlsExporter(Vec<u8>),
}
impl ChannelBinding {
@ -179,6 +181,7 @@ impl ChannelBinding {
ChannelBinding::None => b"n,,",
ChannelBinding::Unsupported => b"y,,",
ChannelBinding::TlsUnique(_) => b"p=tls-unique,,",
ChannelBinding::TlsExporter(_) => b"p=tls-exporter,,",
}
}
@ -188,6 +191,7 @@ impl ChannelBinding {
ChannelBinding::None => &[],
ChannelBinding::Unsupported => &[],
ChannelBinding::TlsUnique(ref data) => data,
ChannelBinding::TlsExporter(ref data) => data,
}
}
@ -197,6 +201,7 @@ impl ChannelBinding {
ChannelBinding::None => false,
ChannelBinding::Unsupported => false,
ChannelBinding::TlsUnique(_) => mechanism == "tls-unique",
ChannelBinding::TlsExporter(_) => mechanism == "tls-exporter",
}
}
}