mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-03 20:17:36 +03:00
Code Issues Projects Releases Packages Wiki Activity
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
3 commits 7 branches 42 tags 12 MiB
Find a file
Adam Langley a367222d8d crypto/tls: support TLS_FALLBACK_SCSV as a server. 
A new attack on CBC padding in SSLv3 was released yesterday[1]. Go only
supports SSLv3 as a server, not as a client. An easy fix is to change
the default minimum version to TLS 1.0 but that seems a little much
this late in the 1.4 process as it may break some things.

Thus this patch adds server support for TLS_FALLBACK_SCSV[2] -- a
mechanism for solving the fallback problem overall. Chrome has
implemented this since February and Google has urged others to do so in
light of yesterday's news.

With this change, clients can indicate that they are doing a fallback
connection and Go servers will be able to correctly reject them.

[1] http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
[2] https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00

LGTM=rsc
R=rsc
CC=golang-codereviews
https://golang.org/cl/157090043
2014-10-15 17:54:04 -07:00
testdata crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
alert.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
cipher_suites.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
common.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
conn.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
conn_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
example_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
generate_cert.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
handshake_client.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
handshake_client_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
handshake_messages.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
handshake_messages_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
handshake_server.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
handshake_server_test.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
handshake_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
key_agreement.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
prf.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
prf_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
ticket.go crypto/tls: ensure that we don't resume when tickets are disabled. 2014-09-26 11:02:09 +10:00
tls.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00
tls_test.go build: move package sources from src/pkg to src 2014-09-08 00:08:51 -04:00