quickjs-tart

quickjs-based runtime for wallet-core logic
Log | Files | Refs | README | LICENSE

ech.md (1017B)


      1 ---
      2 c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
      3 SPDX-License-Identifier: curl
      4 Long: ech
      5 Arg: <config>
      6 Help: Configure ECH
      7 Added: 8.8.0
      8 Category: tls
      9 Protocols: HTTPS
     10 Multi: single
     11 See-also:
     12   - doh-url
     13 Example:
     14   - --ech true $URL
     15 ---
     16 
     17 # `--ech`
     18 
     19 Specify how to do ECH (Encrypted Client Hello).
     20 
     21 The values allowed for \<config\> can be:
     22 
     23 ## `false`
     24 
     25 Do not attempt ECH. The is the default.
     26 
     27 ## `grease`
     28 
     29 Send a GREASE ECH extension
     30 
     31 ## `true`
     32 
     33 Attempt ECH if possible, but do not fail if ECH is not attempted.
     34 (The connection fails if ECH is attempted but fails.)
     35 
     36 ## `hard`
     37 
     38 Attempt ECH and fail if that is not possible. ECH only works with TLS 1.3 and
     39 also requires using DoH or providing an ECHConfigList on the command line.
     40 
     41 ## `ecl:<b64val>`
     42 
     43 A base64 encoded ECHConfigList that is used for ECH.
     44 
     45 ## `pn:<name>`
     46 
     47 A name to use to over-ride the `public_name` field of an ECHConfigList (only
     48 available with OpenSSL TLS support)
     49 
     50 ##
     51 
     52 Most ECH related errors cause error *CURLE_ECH_REQUIRED* (101).