Skip to content

Add TLS 1.3 transport with PQC hybrid key exchange #526

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sergio-correia wants to merge 7 commits into
base: tls
Choose a base branch
from
Open

Add TLS 1.3 transport with PQC hybrid key exchange #526

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
c95cbc7
audisp-remote: add TLS 1.3 transport with PQC key exchange
sergio-correia Apr 17, 2026
92471fa
auditd: add TLS 1.3 transport with PQC key exchange
sergio-correia Apr 17, 2026
d2695ca
docs: add TLS transport tests and documentation
sergio-correia Apr 17, 2026
6a26ff2
auditd: convert TLS handshake to non-blocking
sergio-correia Apr 30, 2026
0127454
autls: extract TLS helpers into internal library
sergio-correia May 15, 2026
03192cf
autls: add GCC function attributes to API declarations
sergio-correia May 15, 2026
ceeef4b
configure: strengthen TLS feature probes
sergio-correia May 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion Makefile.am
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,11 @@
# Rickard E. (Rik) Faith <faith@redhat.com>
#

SUBDIRS = common lib auparse audisp auplugin audisp/plugins src/libev \
SUBDIRS = common lib auparse audisp auplugin
if ENABLE_TLS
SUBDIRS += autls
endif
SUBDIRS += audisp/plugins src/libev \
src tools bindings init.d m4 docs rules
EXTRA_DIST = ChangeLog AUTHORS NEWS README.md INSTALL \
audit.spec COPYING COPYING.LIB \
Expand Down
22 changes: 21 additions & 1 deletion audisp/plugins/remote/Makefile.am
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
#

CONFIG_CLEAN_FILES = *.loT *.rej *.orig
EXTRA_DIST = au-remote.conf audisp-remote.conf notes.txt $(man_MANS)
EXTRA_DIST = au-remote.conf audisp-remote.conf notes.txt $(man_MANS) test-tls.sh
AM_CPPFLAGS = -I${top_srcdir} -I${top_srcdir}/lib -I${top_srcdir}/common \
-I${top_srcdir}/auplugin -I${top_srcdir}/auparse
prog_confdir = $(sysconfdir)/audit
Expand All @@ -40,13 +40,33 @@ test_queue_LDFLAGS = ${ASAN_FLAGS}
endif

audisp_remote_DEPENDENCIES = ${top_builddir}/lib/libaudit.la ${top_builddir}/common/libaucommon.la ${top_builddir}/auplugin/libauplugin.la
if ENABLE_TLS
audisp_remote_DEPENDENCIES += ${top_builddir}/autls/libautls.la
endif
audisp_remote_SOURCES = audisp-remote.c remote-config.c queue.c
audisp_remote_CFLAGS = -fPIE -DPIE -g -D_REENTRANT -D_GNU_SOURCE -Wundef ${WFLAGS}
if ENABLE_TLS
audisp_remote_CFLAGS += -I${top_srcdir}/autls $(OPENSSL_CFLAGS)
endif
audisp_remote_LDFLAGS = -pie -Wl,-z,relro -Wl,-z,now
audisp_remote_LDADD = $(CAPNG_LDADD) $(gss_libs) ${top_builddir}/lib/libaudit.la ${top_builddir}/common/libaucommon.la ${top_builddir}/auplugin/libauplugin.la
if ENABLE_TLS
audisp_remote_LDADD += ${top_builddir}/autls/libautls.la
endif

test_queue_SOURCES = queue.c test-queue.c

if ENABLE_TLS
check_PROGRAMS += test-tls-helpers
test_tls_helpers_SOURCES = test-tls-helpers.c
test_tls_helpers_CFLAGS = -I${top_srcdir} -I${top_srcdir}/autls $(OPENSSL_CFLAGS)
test_tls_helpers_LDADD = ${top_builddir}/autls/libautls.la
if HAVE_ASAN
test_tls_helpers_CFLAGS += ${ASAN_FLAGS}
test_tls_helpers_LDFLAGS = ${ASAN_FLAGS}
endif
endif

install-data-hook:
mkdir -p -m 0750 ${DESTDIR}${plugin_confdir}
$(INSTALL_DATA) -D -m 640 ${srcdir}/$(plugin_conf) ${DESTDIR}${plugin_confdir}
Expand Down
Loading