Skip to content

Add DTLS 1.3 client and server testing - #77

Open
JoTurk wants to merge 1 commit into
tls-attacker:mainfrom
JoTurk:jo/dtls-13
Open

JoTurk wants to merge 1 commit into
tls-attacker:mainfrom
JoTurk:jo/dtls-13

Conversation

@JoTurk

@JoTurk JoTurk commented Oct 15, 2026 •

Copy link
Copy Markdown

Description

Add a -dtls13 mode and enable applicable existing TLS 1.3 tests for DTLS 1.3 clients and servers.
We used this to verify pion/dtls, and it seems to work correctly in our CI pion/dtls-interop#48

This depends on two fixes in tls-attacker:

  1. Fix counter and nonce handling in DTLS 1.3 ChaCha20 TLS-Attacker#250
  2. Implement IGNORE_ACK_MESSAGES for DTLS receive actions TLS-Attacker#251

And tls-scanner support: tls-attacker/TLS-Scanner#189

Breaking Changes

Checklist

  • Updated Submodules (if necessary)
  • Updated Docs (if necessary)

Add a -dtls13 mode and enable applicable existing TLS 1.3 tests for
DTLS 1.3 clients and servers.

We used this to verify pion/dtls, and it seems to work correctly.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant