wired_server_init_in Struct Reference

server_priv_x25519/server_pub_x25519 are the static ECDHE pair; cert_seed is the ECDSA P-256 signing scalar (big-endian). More...

#include <server.h>

Data Fields
const u8 *	server_priv_x25519
	X25519 private, 32 bytes.
const u8 *	server_pub_x25519
	X25519 public, 32 bytes.
const u8 *	cert_seed
	ECDSA P-256 signing scalar, big-endian.
const quic_span *	chain
	optional: external chain, leaf first
usz	chain_count
	entries in chain; 0 = self-signed
const u8 *	san_ipv4
	RFC 5280 4.2.1.6: see wired_srvboot_id.san_ipv4's doc – threaded here to sdrv's self-signed certificate builder.
u64	now_secs
	RFC 5280 4.1.2.5.1: see wired_srvboot_id.now_secs's doc – threaded here to sdrv's self-signed certificate builder.
const u8 *	ticket_key
	RFC 8446 4.6.1: this server's session-ticket encryption key (QUIC_TICKET_KEY_LEN bytes), or 0 to disable session resumption – threaded straight to quic_sdrv_init_in.ticket_key, see its doc.

Detailed Description

server_priv_x25519/server_pub_x25519 are the static ECDHE pair; cert_seed is the ECDSA P-256 signing scalar (big-endian).

chain/chain_count, when non-empty, are an externally issued certificate chain (leaf first, views the caller keeps alive through the handshake) to send verbatim instead of a self-signed certificate; chain NULL or chain_count 0 keeps the driver's default of building its own self-signed P-256 end-entity certificate from cert_seed (sdrv).

Field Documentation

now_secs

u64 wired_server_init_in::now_secs

RFC 5280 4.1.2.5.1: see wired_srvboot_id.now_secs's doc – threaded here to sdrv's self-signed certificate builder.

0 to keep the fixed 2020-2030 window (tests only).

san_ipv4

const u8* wired_server_init_in::san_ipv4

RFC 5280 4.2.1.6: see wired_srvboot_id.san_ipv4's doc – threaded here to sdrv's self-signed certificate builder.

0 to omit.

---

The documentation for this struct was generated from the following file:

• tls/handshake/roles/server/server.h