Now that Cloudflare is rolling out ECH again, it'd be great to see the ECH client APIs exposed in boring:

• SSL_set1_ech_config_list for basic support
• SSL_get0_ech_retry_configs for recovery from key mismatches
• SSL_get0_ech_name_override for custom verifiers to support fallback to non-ECH
• SSL_ech_accepted for completeness

The server APIs would also be good to add, and might be the best way to write a test, but they're a little more involved (EVP_HPKE_KEY has to be exposed in order to provide SSL_ECH_KEYS_add).