mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-03 03:57:36 +03:00
Code Issues Projects Releases Packages Wiki Activity
utls/testdata
History
Filippo Valsorda 9a45e56dc1 crypto/tls: disable RSA-PSS in TLS 1.2 again 
Signing with RSA-PSS can uncover faulty crypto.Signer implementations,
and it can fail for (broken) small keys. We'll have to take that
breakage eventually, but it would be nice for it to be opt-out at first.

TLS 1.3 requires RSA-PSS and is opt-out in Go 1.13. Instead of making a
TLS 1.3 opt-out influence a TLS 1.2 behavior, let's wait to add RSA-PSS
to TLS 1.2 until TLS 1.3 is on without opt-out.

Note that since the Client Hello is sent before a protocol version is
selected, we have to advertise RSA-PSS there to support TLS 1.3.
That means that we still support RSA-PSS on the client in TLS 1.2 for
verifying server certificates, which is fine, as all issues arise on the
signing side. We have to be careful not to pick (or consider available)
RSA-PSS on the client for client certificates, though.

We'd expect tests to change only in TLS 1.2:

    * the server won't pick PSS to sign the key exchange
      (Server-TLSv12-* w/ RSA, TestHandshakeServerRSAPSS);
    * the server won't advertise PSS in CertificateRequest
      (Server-TLSv12-ClientAuthRequested*, TestClientAuth);
    * and the client won't pick PSS for its CertificateVerify
      (Client-TLSv12-ClientCert-RSA-*, TestHandshakeClientCertRSAPSS,
      Client-TLSv12-Renegotiate* because "R" requests a client cert).

Client-TLSv13-ClientCert-RSA-RSAPSS was updated because of a fix in the test.

This effectively reverts 88343530720a52c96b21f2bd5488c8fb607605d7.

Testing was made more complex by the undocumented semantics of OpenSSL's
-[client_]sigalgs (see openssl/openssl#9172).

Updates #32425

Change-Id: Iaddeb2df1f5c75cd090cc8321df2ac8e8e7db349
Reviewed-on: https://go-review.googlesource.com/c/go/+/182339
Reviewed-by: Adam Langley <agl@golang.org>
2019-06-19 19:59:14 +00:00
..
Client-TLSv10-ClientCert-ECDSA-ECDSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ClientCert-ECDSA-RSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ClientCert-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ClientCert-RSA-ECDSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ClientCert-RSA-RSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ECDHE-ECDSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ECDHE-RSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-ExportKeyingMaterial crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv10-RSA-RC4 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv11-ECDHE-ECDSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv11-ECDHE-RSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv11-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv11-RSA-RC4 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-AES128-GCM-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-AES128-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-AES256-GCM-SHA384 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ALPN crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ALPN-NoMatch crypto/tls: support AES-128-CBC cipher suites with SHA-256. 2016-08-18 21:46:46 +00:00
Client-TLSv12-ClientCert-ECDSA-ECDSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ClientCert-ECDSA-RSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ClientCert-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ClientCert-RSA-AES256-GCM-SHA384 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-ClientCert-RSA-ECDSA crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-ClientCert-RSA-RSA crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-ClientCert-RSA-RSAPKCS1v15 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-ClientCert-RSA-RSAPSS crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-ECDHE-ECDSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-ECDSA-AES-GCM crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-ECDSA-AES128-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-ECDSA-AES256-GCM-SHA384 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-ECDSA-CHACHA20-POLY1305 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-RSA-AES crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-RSA-AES128-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ECDHE-RSA-CHACHA20-POLY1305 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-ExportKeyingMaterial crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-P256-ECDHE crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-RenegotiateOnce crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-RenegotiateTwice crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-RenegotiateTwiceRejected crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv12-RenegotiationRejected crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-RSA-RC4 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-SCT crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv12-X25519-ECDHE crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-AES128-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-AES256-SHA384 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ALPN crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-CHACHA20-SHA256 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ClientCert-ECDSA-RSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ClientCert-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ClientCert-RSA-ECDSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ClientCert-RSA-RSAPSS crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Client-TLSv13-ECDSA crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-ExportKeyingMaterial crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-HelloRetryRequest crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-KeyUpdate crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-P256-ECDHE crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Client-TLSv13-X25519-ECDHE crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
example-cert.pem crypto/tls: add examples for [Load]X509KeyPair 2018-04-30 17:25:27 +00:00
example-key.pem crypto/tls: add examples for [Load]X509KeyPair 2018-04-30 17:25:27 +00:00
Server-SSLv3-RSA-3DES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-SSLv3-RSA-AES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-SSLv3-RSA-RC4 crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv10-ECDHE-ECDSA-AES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv10-ExportKeyingMaterial crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv10-RSA-3DES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv10-RSA-AES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv10-RSA-RC4 crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv11-FallbackSCSV crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv11-RSA-RC4 crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-ALPN crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ALPN-NoMatch crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-CipherSuiteCertPreferenceECDSA crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-CipherSuiteCertPreferenceRSA crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ClientAuthRequestedAndECDSAGiven crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ClientAuthRequestedAndEd25519Given crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ClientAuthRequestedAndGiven crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ClientAuthRequestedAndPKCS1v15Given crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ClientAuthRequestedNotGiven crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-ECDHE-ECDSA-AES crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv12-ExportKeyingMaterial crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-IssueTicket crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-IssueTicketPreDisable crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-P256 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-Resume crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-ResumeDisabled crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
Server-TLSv12-RSA-3DES crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-AES crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-AES-GCM crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-AES256-GCM-SHA384 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-RC4 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-RSAPKCS1v15 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-RSA-RSAPSS crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-SNI crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-SNI-GetCertificate crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-SNI-GetCertificateNotFound crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv12-X25519 crypto/tls: disable RSA-PSS in TLS 1.2 again 2019-06-19 19:59:14 +00:00
Server-TLSv13-AES128-SHA256 crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-AES256-SHA384 crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-ALPN crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-ALPN-NoMatch crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-CHACHA20-SHA256 crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-ClientAuthRequestedAndECDSAGiven crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv13-ClientAuthRequestedAndEd25519Given crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv13-ClientAuthRequestedAndGiven crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv13-ClientAuthRequestedNotGiven crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv13-ECDHE-ECDSA-AES crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-Ed25519 crypto/tls: add support for Ed25519 certificates in TLS 1.2 and 1.3 2019-05-17 16:13:45 +00:00
Server-TLSv13-ExportKeyingMaterial crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-HelloRetryRequest crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-IssueTicket crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-IssueTicketPreDisable crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-P256 crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-Resume crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-Resume-HelloRetryRequest crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-ResumeDisabled crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-RSA-RSAPSS crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00
Server-TLSv13-X25519 crypto/tls: implement TLS 1.3 PSK authentication (server side) 2018-11-12 20:43:35 +00:00