Add support for DTLS 1.3 (DTLSv1.3) through SSLContext / SSLEngine

[cconlon]

This PR adds DTLS 1.3 support to the wolfJSSE SSLContext class, for use through the SSLEngine interface. SunJSSE supports up to DTLS 1.2 through the SSLEngine interface, so we are matching similar behavior here for DTLS 1.3.

To support this addition, this PR also makes the following changes:

• Adds DTLS 1.3 to the thin JNI-only layer
• Wraps wolfSSL_DisableExtendedMasterSecret()
• Adds support for the Java system property: jdk.tls.useExtendedMasterSecret for enabling or disabling the TLS Extended Master Secret (EMS) extension. Enabled by default unless explicitly disabled.
• Wraps wolfSSL_send_hrr_cookie() in WolfSSLSession.sendHrrCookie() for enabling HelloRetryRequest use in SSLEngine DTLS support.
• Wraps wolfSSL_dtls_get_drop_stats() for use in SSLEngine DTLS detection of dropped packets to properly set BUFFER_UNDERFLOW status.
• Wrap wolfSSL_set_SessionTicket_cb() and add session ticket callback support to SSLEngine for detection of ticket being received.

wolfSSL Configuration

When testing this work, wolfSSL was configured using:

./configure --enable-jni --enable-dtls --enable-dtls13 --enable-dtls-mtu --enable-hrrcookie --enable-debug CFLAGS="-DWOLFSSL_DTLS_DROP_STATS"

Native wolfSSL's build option for --enable-jni will be updated to include these definitions by default, with wolfSSL/wolfssl#8481.

Testing

Simple JUnit tests for SSLEngine DTLSv1.3 have been added with this PR. This has also been tested against modified versions of the SunJSSE DTLS tests, specifically:

Passed: javax/net/ssl/DTLS/CipherSuite.java
Passed: javax/net/ssl/DTLS/ClientAuth.java
Passed: javax/net/ssl/DTLS/DTLSBufferOverflowUnderflowTest.java
Passed: javax/net/ssl/DTLS/DTLSDataExchangeTest.java
Passed: javax/net/ssl/DTLS/DTLSEnginesClosureTest.java
Passed: javax/net/ssl/DTLS/DTLSHandshakeTest.java
Passed: javax/net/ssl/DTLS/DTLSHandshakeWithReplicatedPacketsTest.java
Passed: javax/net/ssl/DTLS/DTLSIncorrectAppDataTest.java
Passed: javax/net/ssl/DTLS/DTLSNotEnabledRC4Test.java
Passed: javax/net/ssl/DTLS/DTLSOverDatagram.java
Passed: javax/net/ssl/DTLS/DTLSUnsupportedCiphersTest.java
Passed: javax/net/ssl/DTLS/InvalidCookie.java
Passed: javax/net/ssl/DTLS/PacketLossRetransmission.java
Passed: javax/net/ssl/DTLS/Reordered.java
Passed: javax/net/ssl/DTLS/RespondToRetransmit.java
Passed: javax/net/ssl/DTLS/Retransmission.java

A PR to the testing repo has been opened here: https://github.com/wolfSSL/testing/pull/844. A nightly Jenkins test will be created based on the test script in that PR.

Examples

JNI-level example client and server can be run with DTLS 1.3 support using:

$ ant examples
$ ./examples/server.sh -u -v 4
$ ./examples/client.sh -u -v 4

Future Work

• Add JSSE level example client/server that supports DTLS 1.3
• Add SSLContext('DTLS') general mapping
• Add SSLContext('DTLSv1.2') for DTLS 1.2 support
• Add support for "special" features of DTLS 1.3, this PR brings in basic functionality