add X25519MLKEM768 to the start of the default ECDHE curves list, allowing
libtls clients to connect to servers which don't offer any other curves
(this has been seen in the wild with got, reported by stsp). ok tb@
depends on recent libssl changes (ssl_tlsext.c r1.161, t1_lib.c r1.209).
Correctly handle failure to buffer DTLS messages.
If we fail to buffer an outgoing DTLS message, we're not going to be able
to retransmit it. Correctly propagate the failure.
ok kenjiro@ tb@
Move DTLS change cipher spec handling to its own function.
When a TLSv1.2 change cipher spec message has been built, call a separate
function that can handle the DTLS specific processing rather than including
this in the TLS code.
ok kenjiro@ tb@
Move DTLS handshake message handling to its own function.
When a TLSv1.2 handshake message has been built, call a separate function
that can handle the DTLS specific processing rather than including this in
the TLS code.
ok kenjiro@ tb@
Remove ssl3_handshake_msg_hdr_len()
This function is only called in one location, which is always a DTLS
context - use DTLS1_HM_HEADER_LENGTH directly instead.
ok kenjiro@ tb@
remove net/trickle, "bandwidth manager" which uses LD_PRELOAD to override
socket functions; has various time_t issues, breaking build on 32-bit
archs with llvm22.
ok tb
cast to unbreak llvm22 build; however gnushogi appears to be 12 years
dead upstream and there are other type issues so removal might be a good
option (we also had to fix for -fno-common)
Fix #ifdef maze leading to a build failure on (at least) amd64
Also move additional code upper in the file so that we respect the
pseudo order already present, and so that both hunks are contiguous.
Build error reported by tb@