Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
Find a file
Roland Shoemaker a985c0643c crypto/tls: restore OCSP and SCTs during session resumption
Restore previously sent SCTs and stapled OCSP response during session
resumption for both TLS 1.2 and 1.3. This behavior is somewhat
complicated for TLS 1.2 as SCTs are sent during the server hello,
so they override what is saved in ClientSessionState. It is likely
that if the server is sending a different set of SCTs there is probably
a reason for doing so, such as a log being retired, or SCT validation
requirements changing, so it makes sense to defer to the server in
that case.

Fixes #39075

Change-Id: I3c0fa2f69c6bf0247a447c48a1b4c733a882a233
Reviewed-on: https://go-review.googlesource.com/c/go/+/234237
Reviewed-by: Filippo Valsorda <filippo@golang.org>
2020-06-09 23:24:08 +00:00
testdata crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
alert.go crypto/tls: add missing alert values 2020-04-01 19:32:57 +00:00
auth.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
auth_test.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
cipher_suites.go crypto/tls: add CipherSuites, InsecureCipherSuites and CipherSuiteName 2019-11-12 01:09:31 +00:00
common.go crypto/tls: restore OCSP and SCTs during session resumption 2020-06-09 23:24:08 +00:00
common_string.go crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String() 2020-03-11 20:02:18 +00:00
conn.go crypto/tls: add Config.VerifyConnection callback 2020-05-08 02:17:26 +00:00
conn_test.go crypto/tls: select only compatible chains from Certificates 2019-11-12 01:08:57 +00:00
example_test.go crypto/tls: update ExampleDial with a valid root 2020-02-21 23:20:22 +00:00
generate_cert.go crypto/tls: consistently use %v for error formatting 2019-10-11 14:23:52 +00:00
handshake_client.go crypto/tls: restore OCSP and SCTs during session resumption 2020-06-09 23:24:08 +00:00
handshake_client_test.go crypto/tls: restore OCSP and SCTs during session resumption 2020-06-09 23:24:08 +00:00
handshake_client_tls13.go crypto/tls: restore OCSP and SCTs during session resumption 2020-06-09 23:24:08 +00:00
handshake_messages.go crypto/tls: send ec_points_format extension in ServerHello 2019-10-31 15:14:45 +00:00
handshake_messages_test.go crypto/tls: rotate session keys in older TLS versions 2020-05-07 18:33:39 +00:00
handshake_server.go crypto/tls: set CipherSuite for VerifyConnection 2020-06-04 20:16:53 +00:00
handshake_server_test.go crypto/tls: rotate session ticket keys 2020-05-08 02:00:35 +00:00
handshake_server_tls13.go crypto/tls: fix duplicate calls to VerifyConnection 2020-06-03 19:01:50 +00:00
handshake_test.go crypto/tls: retry ETIMEDOUT flakes in localPipe on dragonfly 2019-11-12 17:55:14 +00:00
handshake_unix_test.go crypto/tls: retry net.Dial flakes on Dragonfly 2019-10-21 19:06:29 +00:00
key_agreement.go crypto/tls: refactor certificate and signature algorithm logic 2019-11-12 01:07:15 +00:00
key_schedule.go math/big: add (*Int).FillBytes 2020-05-05 00:36:44 +00:00
key_schedule_test.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
link_test.go crypto/tls: help linker remove code when only Client or Server is used 2020-04-15 19:49:43 +00:00
prf.go crypto/tls: improve error messages for invalid certificates and signatures 2019-10-30 20:18:59 +00:00
prf_test.go crypto/tls: remove SSLv3 support 2019-08-27 22:24:05 +00:00
ticket.go crypto/tls: remove version check when unmarshaling sessionState 2020-05-18 23:09:31 +00:00
tls.go crypto/tls: add Dialer 2020-04-20 20:33:36 +00:00
tls_test.go crypto/tls: test that Clone copies session ticket key fields 2020-06-03 19:23:34 +00:00