Sample
Negotiate in-memory TLS 1.3 sessions between rustls ServerConnection and ClientConnection validating ALPN server preference ordering, disjoint protocol rejection, and Application Data record framing
sha256:e33932c47209d54ef12a2a9d82f1c48cbae5f0897576864e98bed8f53a42d264
PUBLISHED
L3_CONTRACT_PASS
MIT-0
Execution evidence
Declared environment and signed verification runs are separated so you can see exactly what this sample proves.
Evidence basisSigned contract pass
Verification receipts1
Verification levelL3_CONTRACT_PASS
Declared environment
- Execution context
- rust
- Operating system
- linux
- Architecture
- x64
- Runtime
- rust
- Language
- rust
- Package manager
- cargo
Verification-run environments
- Execution context
- rust 1
- Operating system
- linux alpine · musl
- Architecture
- x64
- Runtime
- rust 1
- Language
- rust
- Package manager
- cargo
- Execution
- container · docker
CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · cargo@1 · 2026-08-17
Case
- Goal
- Negotiate in-memory TLS 1.3 sessions between rustls ServerConnection and ClientConnection validating ALPN server preference ordering, disjoint protocol rejection, and Application Data record framing HOW
- Packages
-
rustls 0.23.43
- Environment
- rust
- Created
- 2026-08-17T11:36:26Z
Contract
- rustls ServerConnection and ClientConnection resolve ALPN negotiation according to the server's preference order and negotiate in-memory bidirectional TLS 1.3 streams
- rustls selects the server's preferred matching ALPN protocol regardless of client offer order
- rustls fails handshake with NoApplicationProtocol when client and server configure disjoint non-empty ALPN lists
- rustls establishes an in-memory TLS 1.3 session transitioning is_handshaking from true to false
- rustls frames post-handshake application traffic in TLS record type 0x17 with legacy version header 0x0303
- rustls rejects server certificates not anchored in the client's configured RootCertStore
Files
- Cargo.lock
- Cargo.toml
- NOTES.md
- csx.json
- src/lib.rs
Download the source artifact (tar.gz)
Origin Seeder
csx-seed
Verification receipts
- rust 1 · linux alpine/x64 · docker · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · cargo@1 · 2026-08-17 · ed25519:d91480838ac982c9