Expose Interface for App to Set Stateless Reset Key

[ukingliu]

Description

At present, each MsQuic server utilizes a distinct stateless reset key. When the MsQuic client and server successfully complete the handshake process, they establish communication through an encrypted channel, utilizing an encryption key generated from the respective stateless reset key for their interactions. However, in the event of a server crash followed by a restart, the client remains unaware of this disruption, leaving it unable to communicate with the server due to the unavailability of the encryption key. To resolve this issue, we have introduced an interface that allows the App to set the same stateless reset key on the MsQuic server side.

Fixes #1719.

Testing

We have introduced two new test cases. The first one is designed to validate the length of the stateless reset key to ensure its validity. The second test case focuses on validating the behavior when the stateless reset key is changed and the server is subsequently shut down silently, leading to a client timeout instead of abort scenario.

Documentation

No.

[codecov]

Codecov Report

Merging #3879 (6be46b1) into main (226138d) will decrease coverage by 0.26%.
Report is 24 commits behind head on main.
The diff coverage is 94.73%.

@@            Coverage Diff             @@
##             main    #3879      +/-   ##
==========================================
- Coverage   86.80%   86.54%   -0.26%     
==========================================
  Files          56       56              
  Lines       16693    16712      +19     
==========================================
- Hits        14490    14464      -26     
- Misses       2203     2248      +45     

Files	Coverage Δ
src/core/library.c	83.90% <94.73%> (-0.30%)	⬇️

... and 11 files with indirect coverage changes

[nibanks]

Great job! Just few small things left and this should be good to merge.

[nibanks]

Looks like the CheckDotnet test failed because you need to update the generated file again. Please run .\scripts\generate-dotnet.ps1.

[nibanks]

CheckDotnet is still failing. Please fix that up.

CIFuzz is failing because spinquic is setting the global paramter before a registration is created (good catch):

==40==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000[110](https://github.com/microsoft/msquic/actions/runs/6321366569/job/17165278108?pr=3879#step:5:111) (pc 0x7f686229bfc4 bp 0x7f685c3f4cd0 sp 0x7f685c3f4c08 T10)
==40==The signal is caused by a READ memory access.
==40==Hint: address points to the zero page.
SCARINESS: 10 (null-deref)
    #0 0x7f686229bfc4 in __pthread_mutex_lock (/lib/x86_64-linux-gnu/libpthread.so.0+0xafc4) (BuildId: 7b4536f41cdaa5888408e82d0836e33dcf436466)
    #1 0x4eb114 in __interceptor_pthread_mutex_lock /src/llvm-project/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc
    #2 0x584379 in QuicLibrarySetGlobalParam /src/msquic/src/core/library.c:1135:13
    #3 0x86fb89 in MsQuicSetParam /src/msquic/src/core/api.c:1383:18
    #4 0x57a997 in RunThread(void*) /src/./msquic/src/tools/spin/spinquic.cpp:1330:18
    #5 0x7f6862299608 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x8608) (BuildId: 7b4536f41cdaa5888408e82d0836e33dcf436466)
    #6 0x7f6862193132 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x11f132) (BuildId: 1878e6b475720c7c51969e69ab2d276fae6d1dee)

The code in library.c needs to handle this case (just fail with invalid state if not initialized yet).

[nibanks]

Oh, and we do have preexisting docs for parameters in settings.md. Please update those docs for this new setting.

[nibanks]

Great job! Thanks for doing this!