re-introduce old nss im too tired for this

security/nss/lib/ssl/sslt.h

@@ -33,8 +33,7 @@ typedef enum {
     ssl_hs_certificate_status = 22,
     ssl_hs_key_update = 24,
     ssl_hs_next_proto = 67,
-    ssl_hs_message_hash = 254,           /* Not a real message. */
-    ssl_hs_ech_outer_client_hello = 257, /* Not a real message. */
+    ssl_hs_message_hash = 254, /* Not a real message. */
 } SSLHandshakeType;
 
 typedef enum {
@@ -42,7 +41,7 @@ typedef enum {
     ssl_ct_alert = 21,
     ssl_ct_handshake = 22,
     ssl_ct_application_data = 23,
-    ssl_ct_ack = 26
+    ssl_ct_ack = 25
 } SSLContentType;
 
 typedef enum {
@@ -185,12 +184,6 @@ typedef enum {
     ssl_auth_size /* number of authentication types */
 } SSLAuthType;
 
-typedef enum {
-    ssl_psk_none = 0,
-    ssl_psk_resume = 1,
-    ssl_psk_external = 2,
-} SSLPskType;
-
 /* This is defined for backward compatibility reasons */
 #define ssl_auth_rsa ssl_auth_rsa_decrypt
 
@@ -365,20 +358,6 @@ typedef struct SSLChannelInfoStr {
      */
     PRBool peerDelegCred;
 
-    /* The following fields were added in NSS 3.54. */
-    /* Indicates what type of PSK, if any, was used in a handshake. */
-    SSLPskType pskType;
-
-    /* The following fields were added in NSS 3.60 */
-    /* This field is PR_TRUE when the connection is established
-     * with TLS 1.3 Encrypted Client Hello. */
-    PRBool echAccepted;
-
-    /* The following field was added in NSS 3.66 */
-    /* This filed is PR_TRUE if the FIPS indicator is true for the
-     * current connection */
-    PRBool isFIPS;
-
     /* When adding new fields to this structure, please document the
      * NSS version in which they were added. */
 } SSLChannelInfo;
@@ -387,13 +366,12 @@ typedef struct SSLChannelInfoStr {
 #define ssl_preinfo_version (1U << 0)
 #define ssl_preinfo_cipher_suite (1U << 1)
 #define ssl_preinfo_0rtt_cipher_suite (1U << 2)
-/* ssl_preinfo_peer_auth covers peerDelegCred, authKeyBits,
- * and scheme. Not included in ssl_preinfo_all as it is client-only. */
+/* ssl_preinfo_peer_auth covers peerDelegCred, authKeyBits, and scheme. Not
+ * included in ssl_preinfo_all as it is client-only. */
 #define ssl_preinfo_peer_auth (1U << 3)
-#define ssl_preinfo_ech (1U << 4)
 /* ssl_preinfo_all doesn't contain ssl_preinfo_0rtt_cipher_suite because that
  * field is only set if 0-RTT is sent (client) or accepted (server). */
-#define ssl_preinfo_all (ssl_preinfo_version | ssl_preinfo_cipher_suite | ssl_preinfo_ech)
+#define ssl_preinfo_all (ssl_preinfo_version | ssl_preinfo_cipher_suite)
 
 typedef struct SSLPreliminaryChannelInfoStr {
     /* On return, SSL_GetPreliminaryChannelInfo sets |length| to the smaller of
@@ -441,15 +419,6 @@ typedef struct SSLPreliminaryChannelInfoStr {
     PRUint32 authKeyBits;
     SSLSignatureScheme signatureScheme;
 
-    /* The following fields were added in NSS 3.60. */
-    PRBool echAccepted;
-    /* If the application configured ECH but |!echAccepted|, authCertificate
-     * should use the following hostname extracted from the ECHConfig. */
-    const char* echPublicName;
-
-    /* The following field was added in NSS 3.85. */
-    PRBool ticketSupportsEarlyData;
-
     /* When adding new fields to this structure, please document the
      * NSS version in which they were added. */
 } SSLPreliminaryChannelInfo;
@@ -538,7 +507,6 @@ typedef enum {
     ssl_padding_xtn = 21,
     ssl_extended_master_secret_xtn = 23,
     ssl_record_size_limit_xtn = 28,
-    ssl_delegated_credentials_xtn = 34,
     ssl_session_ticket_xtn = 35,
     /* 40 was used in draft versions of TLS 1.3; it is now reserved. */
     ssl_tls13_pre_shared_key_xtn = 41,
@@ -551,14 +519,11 @@ typedef enum {
     ssl_tls13_post_handshake_auth_xtn = 49,
     ssl_signature_algorithms_cert_xtn = 50,
     ssl_tls13_key_share_xtn = 51,
-    /* TLS 1.3 GREASE extension dummy type for builders. */
-    ssl_tls13_grease_xtn = 0x0a0a,
     ssl_next_proto_nego_xtn = 13172, /* Deprecated. */
     ssl_renegotiation_info_xtn = 0xff01,
+    ssl_delegated_credentials_xtn = 0xff02,
     ssl_tls13_short_header_xtn = 0xff03, /* Deprecated. */
-    ssl_tls13_outer_extensions_xtn = 0xfd00,
-    ssl_tls13_encrypted_client_hello_xtn = 0xfe0d,
-    ssl_tls13_encrypted_sni_xtn = 0xffce, /* Deprecated. */
+    ssl_tls13_encrypted_sni_xtn = 0xffce,
 } SSLExtensionType;
 
 /* This is the old name for the supported_groups extensions. */