mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-03 20:17:36 +03:00
Code Issues Projects Releases Packages Wiki Activity
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
273 commits 7 branches 42 tags 12 MiB
Find a file
Katie Hockman 451074ba19 crypto/tls: rotate session keys in older TLS versions 
Also encode the certificates in a way that's more
consistent with TLS 1.3 (with a 24 byte length prefix).

Note that this will have an additional performance cost
requiring clients to do a full handshake every 7 days
where previously they were able to use the same ticket
indefinitely.

Updates #25256

Change-Id: Ic4d1ba0d92773c490b33b5f6c1320d557cc7347d
Reviewed-on: https://go-review.googlesource.com/c/go/+/231317
Run-TryBot: Katie Hockman <katie@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
2020-05-07 18:33:39 +00:00
testdata crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
alert.go crypto/tls: add missing alert values 2020-04-01 19:32:57 +00:00
auth.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
auth_test.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
cipher_suites.go crypto/tls: add CipherSuites, InsecureCipherSuites and CipherSuiteName 2019-11-12 01:09:31 +00:00
common.go crypto/tls: enforce TLS 1.3 (and TLS 1.2) downgrade protection checks 2020-05-05 17:36:57 +00:00
common_string.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
conn.go crypto/tls: add Dialer 2020-04-20 20:33:36 +00:00
conn_test.go crypto/tls: select only compatible chains from Certificates 2019-11-12 01:08:57 +00:00
example_test.go crypto/tls: update ExampleDial with a valid root 2020-02-21 23:20:22 +00:00
generate_cert.go crypto/tls: consistently use %v for error formatting 2019-10-11 14:23:52 +00:00
handshake_client.go crypto/tls: enforce TLS 1.3 (and TLS 1.2) downgrade protection checks 2020-05-05 17:36:57 +00:00
handshake_client_test.go crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
handshake_client_tls13.go crypto/tls: accept HelloRetryRequest messages with only a cookie 2020-05-06 16:20:51 +00:00
handshake_messages.go crypto/tls: send ec_points_format extension in ServerHello 2019-10-31 15:14:45 +00:00
handshake_messages_test.go crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
handshake_server.go crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
handshake_server_test.go crypto/tls: failed tls.Conn.Write returns a permanent error 2020-04-13 17:38:02 +00:00
handshake_server_tls13.go crypto/tls: select only compatible chains from Certificates 2019-11-12 01:08:57 +00:00
handshake_test.go crypto/tls: retry ETIMEDOUT flakes in localPipe on dragonfly 2019-11-12 17:55:14 +00:00
handshake_unix_test.go crypto/tls: retry net.Dial flakes on Dragonfly 2019-10-21 19:06:29 +00:00
key_agreement.go crypto/tls: refactor certificate and signature algorithm logic 2019-11-12 01:07:15 +00:00
key_schedule.go math/big: add (*Int).FillBytes 2020-05-05 00:36:44 +00:00
key_schedule_test.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
link_test.go crypto/tls: help linker remove code when only Client or Server is used 2020-04-15 19:49:43 +00:00
prf.go crypto/tls: improve error messages for invalid certificates and signatures 2019-10-30 20:18:59 +00:00
prf_test.go crypto/tls: remove SSLv3 support 2019-08-27 22:24:05 +00:00
ticket.go crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
tls.go crypto/tls: add Dialer 2020-04-20 20:33:36 +00:00
tls_test.go crypto/tls: add Dialer 2020-04-20 20:33:36 +00:00