mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-03 20:17:36 +03:00
Code Issues Projects Releases Packages Wiki Activity
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
225 commits 7 branches 42 tags 12 MiB
Find a file
Filippo Valsorda 9a45e56dc1 crypto/tls: disable RSA-PSS in TLS 1.2 again 
Signing with RSA-PSS can uncover faulty crypto.Signer implementations,
and it can fail for (broken) small keys. We'll have to take that
breakage eventually, but it would be nice for it to be opt-out at first.

TLS 1.3 requires RSA-PSS and is opt-out in Go 1.13. Instead of making a
TLS 1.3 opt-out influence a TLS 1.2 behavior, let's wait to add RSA-PSS
to TLS 1.2 until TLS 1.3 is on without opt-out.

Note that since the Client Hello is sent before a protocol version is
selected, we have to advertise RSA-PSS there to support TLS 1.3.
That means that we still support RSA-PSS on the client in TLS 1.2 for
verifying server certificates, which is fine, as all issues arise on the
signing side. We have to be careful not to pick (or consider available)
RSA-PSS on the client for client certificates, though.

We'd expect tests to change only in TLS 1.2:

    * the server won't pick PSS to sign the key exchange
      (Server-TLSv12-* w/ RSA, TestHandshakeServerRSAPSS);
    * the server won't advertise PSS in CertificateRequest
      (Server-TLSv12-ClientAuthRequested*, TestClientAuth);
    * and the client won't pick PSS for its CertificateVerify
      (Client-TLSv12-ClientCert-RSA-*, TestHandshakeClientCertRSAPSS,
      Client-TLSv12-Renegotiate* because "R" requests a client cert).

Client-TLSv13-ClientCert-RSA-RSAPSS was updated because of a fix in the test.

This effectively reverts 88343530720a52c96b21f2bd5488c8fb607605d7.

Testing was made more complex by the undocumented semantics of OpenSSL's
-[client_]sigalgs (see openssl/openssl#9172).

Updates #32425

Change-Id: Iaddeb2df1f5c75cd090cc8321df2ac8e8e7db349
Reviewed-on: https://go-review.googlesource.com/c/go/+/182339
Reviewed-by: Adam Langley <agl@golang.org>
2019-06-19 19:59:14 +00:00
testdata crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
alert.go crypto/tls: implement TLS 1.3 client handshake (base) 2018-11-02 22:07:02 +00:00
auth.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
auth_test.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
cipher_suites.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
common.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
conn.go crypto/tls: fix a minor MAC vs padding leak 2019-04-16 23:10:02 +00:00
conn_test.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
example_test.go crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
generate_cert.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
handshake_client.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
handshake_client_test.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
handshake_client_tls13.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
handshake_messages.go crypto/tls, crypto/x509: update spelling of marshal* 2019-04-16 21:54:01 +00:00
handshake_messages_test.go crypto/tls: implement TLS 1.3 client authentication 2018-11-12 20:43:55 +00:00
handshake_server.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
handshake_server_test.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
handshake_server_tls13.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
handshake_test.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
key_agreement.go crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
key_schedule.go all: move internal/x to vendor/golang.org/x and revendor using 'go mod vendor' 2019-03-11 20:28:54 +00:00
key_schedule_test.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
prf.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
prf_test.go crypto/tls: implement TLS 1.3 PSK authentication (client side) 2018-11-12 20:43:23 +00:00
ticket.go all: move internal/x to vendor/golang.org/x and revendor using 'go mod vendor' 2019-03-11 20:28:54 +00:00
tls.go crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
tls_test.go all: remove PEM-encoded private keys from tests 2019-05-21 20:03:55 +00:00