Struct ServerHandshakeCtx 

pub struct ServerHandshakeCtx<Config, Crypto, Rng> { /* private fields */ }

State machine context for yTLS Server

Implementations

impl<Config, Crypto, Rng> ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

pub fn with_required(config: Config, crypto: Crypto, rng: Rng) -> Self

New yTLS server context with the given configuration

Trait Implementations

impl<Config, Crypto, Rng> ClientHelloProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn handle_extension(&mut self, ext_id: u16, ext_data: &[u8])

fn handle_cipher_suite(&mut self, cipher_suite: &[u8; 2])

fn handle_client_random(&mut self, cr: &[u8; 32])

fn handle_session_id(&mut self, ses_id: &[u8])

impl<Config, Crypto, Rng> CtxHandshakeProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn spin_handshake<Li: TlsLeftIn, Lo: TlsLeftOut, Ks: SecretStore>( &mut self, li: &mut Li, lo: &mut Lo, ks: &mut Ks, ) -> Result<Option<HandshakeComplete>, Self::Error>

Spin yTLS Server Handshake Context

type Error = CtxError

impl<Config, Crypto, Rng> ExtAlpnProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn alpn<'r>(&mut self, alpn: Alpn<'r>) -> bool

impl<Config, Crypto, Rng> ExtCompressCertProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn compress_certificate(&mut self, _alg: CertificateCompressKind)

Client indicates support for a given Certificate Compression algorithm.

impl<Config, Crypto, Rng> ExtDelegatedCredentialProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn delegated_credential_signature_algorithm( &mut self, _sa: SignatureAlgorithm, ) -> bool

Indicate support for the given Signature Algorithm.

impl<Config, Crypto, Rng> ExtEncryptedClientHelloProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn encrypted_client_hello_outer( &mut self, _config_id: u8, _kdf: HkdfKind, _aead: HaeadKind, _enc: &[u8], _payload: &[u8], )

Encrypted Client Hello Outer

impl<Config, Crypto, Rng> ExtGroupProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn group(&mut self, group: Group) -> bool

Check whether any of the provided groups matches. When any of the entries matches, result will be true and otherwise false.

impl<Config, Crypto, Rng> ExtKeyShareProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn key_share(&mut self, g: Group, d: &[u8]) -> bool

impl<Config, Crypto, Rng> ExtPskeProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn pske_mode(&mut self, _pske: PskeKind)

Signals the Pre-Shared Key Exchange Mode supported

impl<Config, Crypto, Rng> ExtRecSizeLimitProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn record_size_limit(&mut self, lim: u16)

impl<Config, Crypto, Rng> ExtSigAlgProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn signature_algorithm(&mut self, s_alg: SignatureAlgorithm) -> bool

Indicate support for the given Signature Algorithm.

impl<Config, Crypto, Rng> ExtSniProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn sni(&mut self, k: EntrySniKind, name: &[u8]) -> bool

Check whether any of the provided SNIs matches. When any of the entries matches, result will be true and otherwise false.

impl<Config, Crypto, Rng> ExtVersionProcessor for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn supported_version(&mut self, s_ver: Version) -> bool

impl<Config, Crypto, Rng> ServerCertificateVerifyBuilder for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn signature_algorithm(&self) -> [u8; 2]

Provide the signature algorithm used

fn sign_cert_verify(&self) -> &[u8]

Sign the current handshake hash with the used signature algorithm and the server private key used to generate the public key within the server certificate.

impl<Config, Crypto, Rng> ServerCertificatesBuilder for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn server_certs_list(&self) -> &[u8]

Provide ordered list of certificates and their internal id

fn server_cert_data(&self, id: u8) -> &[u8]

Provide the ASN.1 DER encoded certificate by the given cert id

fn server_cert_extensions(&self, _id: u8) -> &[u8]

Provide any certificate extensions if any by the given cert id.

impl<Config, Crypto, Rng> ServerHandshakeFinishedBuilder for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn hash_finished(&self) -> &[u8]

Provide the hash

impl<Config, Crypto, Rng> ServerHelloBuilder for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,

fn legacy_version(&self) -> &[u8; 2]

This should return [3, 3] for TLS 1.3

fn server_random(&self) -> &[u8; 32]

Generate 32 bytes server random for the Hello

fn legacy_session_id(&self) -> &[u8]

In TLS 1.3 provide the ClientHello session id (if any) back

fn selected_cipher_suite(&self) -> &[u8; 2]

Server selected the cipher suite from client’s list.

fn selected_legacy_insecure_compression_method(&self) -> Option<u8>

Server selected compression list. This must be None for TLS 1.3.

fn extensions_list(&self) -> &[u16]

Extensions used list

fn extension_data(&self, ext: u16) -> &[u8]

Given extension relevant encoded data. See [ytls_extensions] to encode.

impl<Config, Crypto, Rng> EncryptedExtensionsBuilder for ServerHandshakeCtx<Config, Crypto, Rng>

where Config: TlsServerCtxConfig, Crypto: CryptoConfig, Rng: CryptoRng,