librustls: add rustls_client_config_builder_set_check_selected_alpn

Author: cpu

librustls/src/client.rs

@@ -55,6 +55,7 @@ pub(crate) struct ClientConfigBuilder {
     versions: Vec<&'static SupportedProtocolVersion>,
     verifier: Option<Arc<dyn ServerCertVerifier>>,
     alpn_protocols: Vec<Vec<u8>>,
+    check_selected_alpn: bool,
     enable_sni: bool,
     cert_resolver: Option<Arc<dyn ResolvesClientCert>>,
     key_log: Option<Arc<dyn KeyLog>>,
@@ -71,6 +72,7 @@ impl Default for ClientConfigBuilder {
             versions: Vec::new(),
             verifier: None,
             alpn_protocols: Vec::new(),
+            check_selected_alpn: true,
             // Note: we don't derive Default for this struct because we want to enable SNI
             // by default.
             enable_sni: true,
@@ -269,6 +271,22 @@ impl rustls_client_config_builder {
         }
     }
 
+    /// Enable or disable verifying the selected ALPN was offered.
+    ///
+    /// The default is `true`.
+    ///
+    /// <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.check_selected_alpn>
+    #[no_mangle]
+    pub extern "C" fn rustls_client_config_builder_set_check_selected_alpn(
+        config: *mut rustls_client_config_builder,
+        enable: bool,
+    ) {
+        ffi_panic_boundary! {
+            let config = try_mut_from_ptr!(config);
+            config.check_selected_alpn = enable;
+        }
+    }
+
     /// Enable or disable SNI.
     /// <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.enable_sni>
     #[no_mangle]

librustls/src/rustls.h

@@ -1448,6 +1448,16 @@ rustls_result rustls_client_config_builder_set_alpn_protocols(struct rustls_clie
                                                               const struct rustls_slice_bytes *protocols,
                                                               size_t len);
 
+/**
+ * Enable or disable verifying the selected ALPN was offered.
+ *
+ * The default is `true`.
+ *
+ * <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.check_selected_alpn>
+ */
+void rustls_client_config_builder_set_check_selected_alpn(struct rustls_client_config_builder *config,
+                                                          bool enable);
+
 /**
  * Enable or disable SNI.
  * <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.enable_sni>

website/static/api.json

@@ -506,6 +506,14 @@
       "name": "rustls_client_config_builder_set_alpn_protocols",
       "text": "```c\nrustls_result rustls_client_config_builder_set_alpn_protocols(struct rustls_client_config_builder *builder,\n                                                              const struct rustls_slice_bytes *protocols,\n                                                              size_t len);\n```"
     },
+    {
+      "anchor": "rustls-client-config-builder-set-check-selected-alpn",
+      "comment": "Enable or disable verifying the selected ALPN was offered.\n\n The default is `true`.\n\n <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.check_selected_alpn>",
+      "feature": null,
+      "deprecation": null,
+      "name": "rustls_client_config_builder_set_check_selected_alpn",
+      "text": "```c\nvoid rustls_client_config_builder_set_check_selected_alpn(struct rustls_client_config_builder *config,\n                                                          bool enable);\n```"
+    },
     {
       "anchor": "rustls-client-config-builder-set-enable-sni",
       "comment": "Enable or disable SNI.\n <https://docs.rs/rustls/latest/rustls/struct.ClientConfig.html#structfield.enable_sni>",