Server app managed custom resumption tickets/Client app managed resumption tickets over SChannel

docs/api/QUIC_CREDENTIAL_CONFIG.md

@@ -163,7 +163,23 @@ Enable CA certificate file provided in the `CaCertificateFile` member.
 
 `QUIC_CREDENTIAL_FLAG_DISABLE_AIA`
 
-The following flag can be set to explicitly disable AIA retrievals. Only valid on Windows.
+Explicitly disable AIA retrievals. Only valid on Windows.
+
+`QUIC_CREDENTIAL_FLAG_DISABLE_RESUMPTION`
+
+**Preview feature**: This flag is in [preview](../PreviewFeatures.md). It should be considered unstable and can be subject to breaking changes.
+
+Disables TLS session resumption. Only valid on Windows with SChannel.
+
+`QUIC_CREDENTIAL_FLAG_ALLOW_RESUMPTION_TICKET_MANAGEMENT`
+
+**Preview feature**: This flag is in [preview](../PreviewFeatures.md). It should be considered unstable and can be subject to breaking changes.
+
+Enables exclusive application management of TLS session resumption tickets and disables any automatic resumption ticket management in the underlying TLS library. Only valid on Windows Server 2025 or newer OS, with SChannel TLS.
+
+When enabled on a server application, resumption tickets must be issued by the server using the [ConnectionSendResumptionTicket](ConnectionSendResumptionTicket.md) API and incoming application state tickets are received through the [QUIC_CONNECTION_EVENT_RESUMED](QUIC_CONNECTION_EVENT.md) notification.
+
+When enabled on a client application, incoming session resumption tickets are received through [QUIC_CONNECTION_EVENT_RESUMPTION_TICKET_RECEIVED](QUIC_CONNECTION_EVENT.md) notification. A subsequent resuming client connection must apply the latest session resumption ticket to the connection through the [QUIC_PARAM_CONN_RESUMPTION_TICKET](../Settings.md) connection setting.
 
 #### `CertificateHash`
 

src/generated/linux/tls_schannel.c.clog.h

@@ -14,6 +14,10 @@
 #include "tls_schannel.c.clog.h.lttng.h"
 #endif
 #include <lttng/tracepoint-event.h>
+#ifndef _clog_MACRO_QuicTraceLogWarning
+#define _clog_MACRO_QuicTraceLogWarning  1
+#define QuicTraceLogWarning(a, ...) _clog_CAT(_clog_ARGN_SELECTOR(__VA_ARGS__), _clog_CAT(_,a(#a, __VA_ARGS__)))
+#endif
 #ifndef _clog_MACRO_QuicTraceLogVerbose
 #define _clog_MACRO_QuicTraceLogVerbose  1
 #define QuicTraceLogVerbose(a, ...) _clog_CAT(_clog_ARGN_SELECTOR(__VA_ARGS__), _clog_CAT(_,a(#a, __VA_ARGS__)))
@@ -33,6 +37,22 @@
 #ifdef __cplusplus
 extern "C" {
 #endif
+/*----------------------------------------------------------
+// Decoder Ring for SchannelTlsInitWarning
+// [ tls] Explicit resumption ticket management enabled, but the feature is not supported on this platform
+// QuicTraceLogWarning(
+                SchannelTlsInitWarning,
+                "[ tls] Explicit resumption ticket management enabled, but the feature is not supported on this platform");
+----------------------------------------------------------*/
+#ifndef _clog_2_ARGS_TRACE_SchannelTlsInitWarning
+#define _clog_2_ARGS_TRACE_SchannelTlsInitWarning(uniqueId, encoded_arg_string)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelTlsInitWarning );\
+
+#endif
+
+
+
+
 /*----------------------------------------------------------
 // Decoder Ring for SchannelAchAsync
 // [ tls] Calling SspiAcquireCredentialsHandleAsyncW
@@ -49,6 +69,22 @@ tracepoint(CLOG_TLS_SCHANNEL_C, SchannelAchAsync );\
 
 
 
+/*----------------------------------------------------------
+// Decoder Ring for SchannelTlsInitVerbose
+// [ tls] Explicit resumption ticket management enabled
+// QuicTraceLogVerbose(
+                SchannelTlsInitVerbose,
+                "[ tls] Explicit resumption ticket management enabled");
+----------------------------------------------------------*/
+#ifndef _clog_2_ARGS_TRACE_SchannelTlsInitVerbose
+#define _clog_2_ARGS_TRACE_SchannelTlsInitVerbose(uniqueId, encoded_arg_string)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelTlsInitVerbose );\
+
+#endif
+
+
+
+
 /*----------------------------------------------------------
 // Decoder Ring for SchannelAchWorkerStart
 // [ tls] Starting ACH worker
@@ -277,18 +313,18 @@ tracepoint(CLOG_TLS_SCHANNEL_C, SchannelMissingData , arg1, arg3);\
 // Decoder Ring for SchannelTransParamsBufferTooSmall
 // [conn][%p] Peer TP too large for available buffer (%u vs. %u)
 // QuicTraceLogConnInfo(
-                        SchannelTransParamsBufferTooSmall,
-                        TlsContext->Connection,
-                        "Peer TP too large for available buffer (%u vs. %u)",
-                        OutSecBufferDesc.pBuffers[i].cbBuffer,
-                        (TlsContext->PeerTransportParams != NULL) ?
-                            TlsContext->PeerTransportParamsLength :
-                            *InBufferLength);
+                    SchannelTransParamsBufferTooSmall,
+                    TlsContext->Connection,
+                    "Peer TP too large for available buffer (%u vs. %u)",
+                    OutSecBufferDesc.pBuffers[i].cbBuffer,
+                    (TlsContext->PeerTransportParams != NULL) ?
+                        TlsContext->PeerTransportParamsLength :
+                        *InBufferLength);
 // arg1 = arg1 = TlsContext->Connection = arg1
 // arg3 = arg3 = OutSecBufferDesc.pBuffers[i].cbBuffer = arg3
 // arg4 = arg4 = (TlsContext->PeerTransportParams != NULL) ?
-                            TlsContext->PeerTransportParamsLength :
-                            *InBufferLength = arg4
+                        TlsContext->PeerTransportParamsLength :
+                        *InBufferLength = arg4
 ----------------------------------------------------------*/
 #ifndef _clog_5_ARGS_TRACE_SchannelTransParamsBufferTooSmall
 #define _clog_5_ARGS_TRACE_SchannelTransParamsBufferTooSmall(uniqueId, arg1, encoded_arg_string, arg3, arg4)\
@@ -299,6 +335,46 @@ tracepoint(CLOG_TLS_SCHANNEL_C, SchannelTransParamsBufferTooSmall , arg1, arg3,
 
 
 
+/*----------------------------------------------------------
+// Decoder Ring for SchannelServerIgnoringTicket
+// [conn][%p] Server app resumption state rejected. Proceeding with the connection. State size: %u bytes
+// QuicTraceLogConnInfo(
+                    SchannelServerIgnoringTicket,
+                    TlsContext->Connection,
+                    "Server app resumption state rejected. Proceeding with the connection. State size: %u bytes",
+                    TlsContext->RxAppSessionState->AppSessionStateSize);
+// arg1 = arg1 = TlsContext->Connection = arg1
+// arg3 = arg3 = TlsContext->RxAppSessionState->AppSessionStateSize = arg3
+----------------------------------------------------------*/
+#ifndef _clog_4_ARGS_TRACE_SchannelServerIgnoringTicket
+#define _clog_4_ARGS_TRACE_SchannelServerIgnoringTicket(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelServerIgnoringTicket , arg1, arg3);\
+
+#endif
+
+
+
+
+/*----------------------------------------------------------
+// Decoder Ring for SchannelClientIgnoringTicket
+// [conn][%p] Client app rejected session ticket. Proceeding with the connection. Ticket size: %u bytes
+// QuicTraceLogConnInfo(
+                    SchannelClientIgnoringTicket,
+                    TlsContext->Connection,
+                    "Client app rejected session ticket. Proceeding with the connection. Ticket size: %u bytes",
+                    TlsContext->RxSessionTicket->SessionTicketSize);
+// arg1 = arg1 = TlsContext->Connection = arg1
+// arg3 = arg3 = TlsContext->RxSessionTicket->SessionTicketSize = arg3
+----------------------------------------------------------*/
+#ifndef _clog_4_ARGS_TRACE_SchannelClientIgnoringTicket
+#define _clog_4_ARGS_TRACE_SchannelClientIgnoringTicket(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelClientIgnoringTicket , arg1, arg3);\
+
+#endif
+
+
+
+
 /*----------------------------------------------------------
 // Decoder Ring for SchannelContextCreated
 // [conn][%p] TLS context Created
@@ -360,39 +436,79 @@ tracepoint(CLOG_TLS_SCHANNEL_C, SchannelKeyReady , arg1, arg3, arg4, arg5);\
 
 
 /*----------------------------------------------------------
-// Decoder Ring for SchannelIgnoringTicket
-// [conn][%p] Ignoring %u ticket bytes
+// Decoder Ring for SchannelServerTxTicket
+// [conn][%p] Sending managed resumption ticket data, %u bytes
 // QuicTraceLogConnVerbose(
-            SchannelIgnoringTicket,
-            TlsContext->Connection,
-            "Ignoring %u ticket bytes",
-            *BufferLength);
+                SchannelServerTxTicket,
+                TlsContext->Connection,
+                "Sending managed resumption ticket data, %u bytes",
+                *BufferLength);
 // arg1 = arg1 = TlsContext->Connection = arg1
 // arg3 = arg3 = *BufferLength = arg3
 ----------------------------------------------------------*/
-#ifndef _clog_4_ARGS_TRACE_SchannelIgnoringTicket
-#define _clog_4_ARGS_TRACE_SchannelIgnoringTicket(uniqueId, arg1, encoded_arg_string, arg3)\
-tracepoint(CLOG_TLS_SCHANNEL_C, SchannelIgnoringTicket , arg1, arg3);\
+#ifndef _clog_4_ARGS_TRACE_SchannelServerTxTicket
+#define _clog_4_ARGS_TRACE_SchannelServerTxTicket(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelServerTxTicket , arg1, arg3);\
 
 #endif
 
 
 
 
 /*----------------------------------------------------------
-// Decoder Ring for SchannelProcessingData
-// [conn][%p] Processing %u received bytes
+// Decoder Ring for SchannelTlsProcessingData
+// [conn][%p] Processing %u TX or RX bytes
 // QuicTraceLogConnVerbose(
-        SchannelProcessingData,
+        SchannelTlsProcessingData,
         TlsContext->Connection,
-        "Processing %u received bytes",
+        "Processing %u TX or RX bytes",
         *BufferLength);
 // arg1 = arg1 = TlsContext->Connection = arg1
 // arg3 = arg3 = *BufferLength = arg3
 ----------------------------------------------------------*/
-#ifndef _clog_4_ARGS_TRACE_SchannelProcessingData
-#define _clog_4_ARGS_TRACE_SchannelProcessingData(uniqueId, arg1, encoded_arg_string, arg3)\
-tracepoint(CLOG_TLS_SCHANNEL_C, SchannelProcessingData , arg1, arg3);\
+#ifndef _clog_4_ARGS_TRACE_SchannelTlsProcessingData
+#define _clog_4_ARGS_TRACE_SchannelTlsProcessingData(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelTlsProcessingData , arg1, arg3);\
+
+#endif
+
+
+
+
+/*----------------------------------------------------------
+// Decoder Ring for SchannelServerRxTicket
+// [conn][%p] Server app resumption state delivered. State size: %u bytes
+// QuicTraceLogConnVerbose(
+                    SchannelServerRxTicket,
+                    TlsContext->Connection,
+                    "Server app resumption state delivered. State size: %u bytes",
+                    TlsContext->RxAppSessionState->AppSessionStateSize);
+// arg1 = arg1 = TlsContext->Connection = arg1
+// arg3 = arg3 = TlsContext->RxAppSessionState->AppSessionStateSize = arg3
+----------------------------------------------------------*/
+#ifndef _clog_4_ARGS_TRACE_SchannelServerRxTicket
+#define _clog_4_ARGS_TRACE_SchannelServerRxTicket(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelServerRxTicket , arg1, arg3);\
+
+#endif
+
+
+
+
+/*----------------------------------------------------------
+// Decoder Ring for SchannelClientRxTicket
+// [conn][%p] Resumption session ticket delivered. Ticket size: %u bytes
+// QuicTraceLogConnVerbose(
+                    SchannelClientRxTicket,
+                    TlsContext->Connection,
+                    "Resumption session ticket delivered. Ticket size: %u bytes",
+                    TlsContext->RxSessionTicket->SessionTicketSize);
+// arg1 = arg1 = TlsContext->Connection = arg1
+// arg3 = arg3 = TlsContext->RxSessionTicket->SessionTicketSize = arg3
+----------------------------------------------------------*/
+#ifndef _clog_4_ARGS_TRACE_SchannelClientRxTicket
+#define _clog_4_ARGS_TRACE_SchannelClientRxTicket(uniqueId, arg1, encoded_arg_string, arg3)\
+tracepoint(CLOG_TLS_SCHANNEL_C, SchannelClientRxTicket , arg1, arg3);\
 
 #endif
 
@@ -481,11 +597,11 @@ tracepoint(CLOG_TLS_SCHANNEL_C, TlsError , arg2, arg3);\
 // Decoder Ring for TlsErrorStatus
 // [ tls][%p] ERROR, %u, %s.
 // QuicTraceEvent(
-                    TlsErrorStatus,
-                    "[ tls][%p] ERROR, %u, %s.",
-                    TlsContext->Connection,
-                    Status,
-                    "Convert SNI to unicode");
+                        TlsErrorStatus,
+                        "[ tls][%p] ERROR, %u, %s.",
+                        TlsContext->Connection,
+                        Status,
+                        "Convert SNI to unicode");
 // arg2 = arg2 = TlsContext->Connection = arg2
 // arg3 = arg3 = Status = arg3
 // arg4 = arg4 = "Convert SNI to unicode" = arg4