leyline-http 0.1.1

HTTP client that mimics browsers on the wire
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use crate::iana::{cipher_name, curve_name};
use crate::profile::TlsProfile;
use crate::profile::extension::apply_extensions;

use super::{iana_names, parse_list};

const RECORD_VERSION: &str = "771";

pub(super) fn apply(tls: &mut TlsProfile, raw: &str) -> Result<(), String> {
    let fields: Vec<&str> = raw.trim().split(',').collect();
    let [version, ciphers, extensions, curves, point_formats] = fields.as_slice() else {
        return Err(format!(
            "expected 5 comma-separated fields (version,ciphers,extensions,curves,point formats), \
             got {}",
            fields.len()
        ));
    };
    if *version != RECORD_VERSION {
        return Err(format!(
            "version {version} is not {RECORD_VERSION}; leyline sends TLS 1.2 as the ClientHello \
             version"
        ));
    }
    if parse_list(point_formats, 10, "point format")? != [0] {
        return Err(format!(
            "point formats {point_formats:?} are not \"0\"; BoringSSL sends only uncompressed"
        ));
    }
    tls.ciphers = iana_names(
        tls,
        &parse_list(ciphers, 10, "cipher")?,
        cipher_name,
        "cipher",
    )?;
    tls.curves = iana_names(tls, &parse_list(curves, 10, "curve")?, curve_name, "curve")?;
    if let Some(shares) = tls.key_shares.as_mut() {
        shares.retain(|share| tls.curves.contains(share));
    }
    let order = apply_extensions(tls, &parse_list(extensions, 10, "extension")?)?;
    tls.extension_permutation = Some(order);
    tls.permute_extensions = false;
    Ok(())
}