Juliusz Sosinowicz 9dbd35dc7c DTLS 1.3 write dup support ...

- Copy TLS 1.3 traffic secrets and DTLS 1.3 epoch/cipher state to the
  write-dup side in DupSSL so key updates can be performed.
- Delegate KeyUpdate responses from the read side to the write side via
  the shared WriteDup struct, for both peer-initiated and local key
  updates.
- Delegate DTLS 1.3 ACK sending from the read side to the write side.
- Track DTLS 1.3 KeyUpdate ACKs: write side records the in-flight
  KeyUpdate epoch/seq, read side sets keyUpdateAcked when the matching
  ACK arrives.
- Delegate post-handshake certificate authentication (CertificateRequest
  processing) from the read side to the write side, transferring
  transcript hashes, cert context, and signature parameters.
- Reset prevSent/plainSz to prevent stale values from SendData to think
  that data was already sent.
- Refactor FreeHandshakeHashes into Free_HS_Hashes for reuse.
- Move DTLS 1.3 epoch initialization earlier in InitSSL so the
  write-dup early-return path has valid epoch state.
- Add tests for write dup with all protocol versions, key update,
  post-handshake auth, and WANT_WRITE recovery.
- Add --enable-all --enable-writedup to CI os-check matrix.

2026-03-23 12:21:40 +01:00

..

ISSUE_TEMPLATE

an -> a

2025-02-13 14:50:32 -05:00

renode-test/stm32h753

Fix trailing whitespace and flush-left

2026-01-05 13:39:43 +00:00

scripts

Extend timeout for tls13-client

2026-02-20 16:35:52 -06:00

workflows

DTLS 1.3 write dup support

2026-03-23 12:21:40 +01:00

PULL_REQUEST_TEMPLATE.md

github: Initial templates

2022-01-19 10:36:01 -08:00

SECURITY.md

* Fixed some build configuration variations.

2023-01-03 10:59:59 -08:00