TLS Handshake: Demystifying Secure Connections

The TLS handshake isn’t about securely exchanging data; it’s a complex negotiation where the client and server establish how they’ll securely exchange data, often with surprising fragility.

Let’s see it in action. Imagine a simple curl request to a server.

curl -v https://example.com

The -v flag is crucial here. It makes curl verbose, showing us every step of the TLS handshake. You’ll see output like this, interspersed with the actual HTTP response:

*   Trying 93.184.216.34:443...
* Connected to example.com (93.184.216.34) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* TLSv1.3 (OUT), TLS handshake, Client Hello (1):
... (many more TLS messages) ...
* TLSv1.3 (IN), TLS handshake, Server Hello (2):
...
* Server certificate:
*  subject: CN=example.com
*  start date: Oct 26 00:00:00 2023 GMT
*  expire date: Jan 24 23:59:59 2024 GMT
*  issuer: C=US; O=Let's Encrypt; CN=R3
...
* TLSv1.3 (OUT), TLS handshake, Client Certificate (11):
* TLSv1.3 (OUT), TLS handshake, CERT verify (15):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server provided Ciphers: TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_GCM_SHA256
* Server provided PSEUDO_RANDOM: ...
* Server provided CERTIFICATE_AUTHORITIES: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided SRTP_MASTER_KEY_IDENTIFIER: ...
* Server provided EARLY_DATA: ...
* Server provided ALPN: h2, http/1.1
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided OCSP_STAPLING: ...
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided SESSION_TICKET: ...
* Server provided TLS_MAX_FRAG_LEN: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided REJECT_RETRY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided SESSION_TICKET: ...
* Server provided SRTP_MASTER_KEY_IDENTIFIER: ...
* Server provided TLS_MAX_FRAG_LEN: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_SHARED_KEY: ...
* Server provided RENEGOTIATION_INFO: ...
* Server provided REJECT_RETRY: ...
* Server provided OCSP_STAPLING: ...
* Server provided ALPN: h2, http/1.1
* Server provided POST_HANDSHAKE_AUTH: ...
* Server provided CERTIFICATE_TRANSPARENCY: ...
* Server provided COMPRESSION_METHODS: ...
* Server provided NEW_SESSION_TICKET: ...
* Server provided PSEUDO_RANDOM: ...
* Server provided SUPPORTED_GROUPS: ...
* Server provided KEY_SHARE: ...
* Server provided PRE_