From 928968947a4f7c17659e424cecf54b45e5be1f76 Mon Sep 17 00:00:00 2001 From: 0x676e67 Date: Wed, 18 Dec 2024 19:34:06 +0800 Subject: [PATCH] boring-sys: Add TLS extension zstd cert compression (#24) --- ...gssl-44b3df6f03d85c901767250329c571db405122d5.patch | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/boring-sys/patches/boringssl-44b3df6f03d85c901767250329c571db405122d5.patch b/boring-sys/patches/boringssl-44b3df6f03d85c901767250329c571db405122d5.patch index 47c0359d..46ffa2f2 100644 --- a/boring-sys/patches/boringssl-44b3df6f03d85c901767250329c571db405122d5.patch +++ b/boring-sys/patches/boringssl-44b3df6f03d85c901767250329c571db405122d5.patch @@ -4228,7 +4228,7 @@ index 53aa9b453..3791dfe5d 100644 #define SSL_get_app_data(s) (SSL_get_ex_data(s, 0)) #define SSL_SESSION_set_app_data(s, a) \ diff --git a/src/include/openssl/tls1.h b/src/include/openssl/tls1.h -index 772fb87a3..4cb6b5667 100644 +index 772fb87a3..511793068 100644 --- a/src/include/openssl/tls1.h +++ b/src/include/openssl/tls1.h @@ -181,6 +181,8 @@ extern "C" { @@ -4240,6 +4240,14 @@ index 772fb87a3..4cb6b5667 100644 // ExtensionType values from RFC 6066 #define TLSEXT_TYPE_server_name 0 #define TLSEXT_TYPE_status_request 5 +@@ -286,6 +288,7 @@ extern "C" { + // From https://www.rfc-editor.org/rfc/rfc8879.html#section-3 + #define TLSEXT_cert_compression_zlib 1 + #define TLSEXT_cert_compression_brotli 2 ++#define TLSEXT_cert_compression_zstd 3 + + #define TLSEXT_MAXLEN_host_name 255 + diff --git a/src/sources.cmake b/src/sources.cmake index 5c7e881bf..3c0770cf3 100644 --- a/src/sources.cmake