Skip to content

Support retrieving TLS-unique #9864

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
irium opened this issue Apr 30, 2019 · 3 comments
Closed

Support retrieving TLS-unique #9864

irium opened this issue Apr 30, 2019 · 3 comments
Labels
area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions
Milestone

Comments

@irium
Copy link

irium commented Apr 30, 2019

We are developing EST server on .NET platform. Currently we're struggling with getting 'tls-unique' somehow using available options. We tried: WCF, HttpListener.Request.TransportContext.GetTlsTokenBindings(), TcpListener->SslStream.TransportContext.GetTlsTokenBindings()

None of them is working so :( I see in the AspNetCore sources that it's support is postponed.
https://github.com/aspnet/HttpSysServer/issues/231

We've sent questions to MSDN Forums, stackoverflow...
No one is know how to get 'tls-unique' from TLS using .NET platform (any technology).

So the question is: when ITlsTokenBindingFeature support is planned to be implemented???

@Tratcher
Copy link
Member

@blowdart

@blowdart
Copy link
Contributor

I believe the same response still stands, when there's enough demand for it. Given the move of Edge, to Chromium, where it's not supported, it really does take a back seat these days to features that have a higher customer demand and value.

@blowdart blowdart added this to the Backlog milestone Apr 30, 2019
@irium
Copy link
Author

irium commented Sep 30, 2019

I've found that TLS-Unique is actually supported via SslStream.TransportContext.GetChannelBinding(ChannelBindingKind.Unique).
HttpsConnectionAdapter puts SslStream into ConnectionContext.Features when HttpsConnectionAdapterOptions.ServerCertificateSelector is set (i.e. not null).

@irium irium closed this as completed Sep 30, 2019
@ghost ghost locked as resolved and limited conversation to collaborators Dec 3, 2019
@amcasey amcasey added area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions and removed area-runtime labels Aug 24, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions
Projects
None yet
Development

No branches or pull requests

5 participants