microsoft/msquic

Support for multiple server certificates

Open

#3,141 opened on Oct 12, 2022

View on GitHub
 (5 comments) (0 reactions) (0 assignees)C (671 forks)github user discovery
Area: APITLS: SchannelTLS: quicTLSfeature requestgood first issue

Repository metrics

Stars
 (4,712 stars)
PR merge metrics
 (PR metrics pending)

Description

Describe the feature you'd like supported

Currently MsQuic only supports a single QUIC_CERTIFICATE_HASH_STORE in QUIC_CREDENTIAL_CONFIG, so servers cannot offer both RSA-based and ECDSA-based ciphers. As certificate protocols evolve it would be useful to support multiple types of certificates simultaneously.

Proposed solution

QUIC_CREDENTIAL_CONFIG.CertificateHashStore is already a pointer type. Either accept an array length via the Reserved parameter, or create a new QUIC_CERTIFICATE_MULTI_HASH_STORE type to handle an array of hash store objects.

Additional context

No response

Contributor guide

Research direction
Investigate the current QUIC CREDENTIAL CONFIG structure and design a way to support multiple certificate hash stores, possibly by extending the structure or creating a new type.
Tech stack
c
Domain
networking
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
C
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20