microsoft/msquic

Support for multiple server certificates

Open

#3,141 opened on Oct 12, 2022

View on GitHub
 (5 comments) (0 reactions) (0 assignees)C (671 forks)github user discovery
Area: APITLS: SchannelTLS: quicTLSfeature requestgood first issue

Repository metrics

Stars
 (4,712 stars)
PR merge metrics
 (Avg merge 6d) (40 merged PRs in 30d)

Description

Describe the feature you'd like supported

Currently MsQuic only supports a single QUIC_CERTIFICATE_HASH_STORE in QUIC_CREDENTIAL_CONFIG, so servers cannot offer both RSA-based and ECDSA-based ciphers. As certificate protocols evolve it would be useful to support multiple types of certificates simultaneously.

Proposed solution

QUIC_CREDENTIAL_CONFIG.CertificateHashStore is already a pointer type. Either accept an array length via the Reserved parameter, or create a new QUIC_CERTIFICATE_MULTI_HASH_STORE type to handle an array of hash store objects.

Additional context

No response

Contributor guide

Research direction
Investigate the current QUIC CREDENTIAL CONFIG structure and design a way to support multiple certificate hash stores, possibly by extending the structure or creating a new type.
Tech stack
c
Domain
networking
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
C
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20