Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
Find a file
Roland Shoemaker ade44c2ba6 crypto/tls: properly return ECH retry configs
When ECH is rejected, properly take retry configs from the encrypted
extensions message. Also fix the bogo shim to properly test for this
behavior.

We should properly map the full BoringSSL -> Go errors so that we don't
run into a similar failure in the future, but this is left for a follow
up CL.

Fixes #70915

Change-Id: Icc1878ff6f87df059e7b83e0a431f50f1fea833c
Reviewed-on: https://go-review.googlesource.com/c/go/+/638583
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
2025-01-02 09:38:03 -08:00
fipsonly crypto/tls: FIPS 140-3 mode 2024-11-21 16:34:27 +00:00
internal/fips140tls crypto/tls: FIPS 140-3 mode 2024-11-21 16:34:27 +00:00
testdata crypto/ecdsa: implement deterministic and hedged signatures 2024-11-19 23:02:26 +00:00
alert.go crypto/tls: add ech client support 2024-05-23 03:10:12 +00:00
auth.go crypto/tls: FIPS 140-3 mode 2024-11-21 16:34:27 +00:00
auth_test.go crypto/tls: test with FIPS 140-3 TLS mode 2024-11-22 00:00:26 +00:00
bogo_config.json crypto/tls: properly return ECH retry configs 2025-01-02 09:38:03 -08:00
bogo_shim_test.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
cache.go crypto/tls: use SessionState on the client side 2023-05-24 23:56:41 +00:00
cache_test.go crypto/tls: add a certificate cache implementation 2022-11-07 19:46:27 +00:00
cipher_suites.go crypto/tls: fix a broken link 2024-11-27 11:42:12 +00:00
common.go crypto/tls: normalize spelling of "ClientHello" in comments 2024-12-18 08:50:08 -08:00
common_string.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
conn.go crypto/tls: add ech client support 2024-05-23 03:10:12 +00:00
conn_test.go crypto/tls: test with FIPS 140-3 TLS mode 2024-11-22 00:00:26 +00:00
defaults.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
ech.go crypto/tls: add server-side ECH 2024-11-21 22:50:04 +00:00
ech_test.go crypto/tls: add ech client support 2024-05-23 03:10:12 +00:00
example_test.go all: make use of builtin clear 2024-03-27 18:23:49 +00:00
fips_test.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
generate_cert.go crypto/tls: delete unnecessary line of return 2022-08-08 15:22:02 +00:00
handshake_client.go crypto/tls: properly return ECH retry configs 2025-01-02 09:38:03 -08:00
handshake_client_test.go crypto/tls: fix Config.Time in tests using expired certificates 2025-01-01 21:18:59 -08:00
handshake_client_tls13.go crypto/tls: properly return ECH retry configs 2025-01-02 09:38:03 -08:00
handshake_messages.go crypto/tls: fix misspelling in comment 2024-12-30 12:38:22 -08:00
handshake_messages_test.go crypto/tls: add server-side ECH 2024-11-21 22:50:04 +00:00
handshake_server.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
handshake_server_test.go crypto/tls: fix Config.Time in tests using expired certificates 2025-01-01 21:18:59 -08:00
handshake_server_tls13.go crypto/mlkem: swap order of return values of Encapsulate 2024-12-26 12:33:05 -08:00
handshake_test.go crypto/tls: fix Config.Time in tests using expired certificates 2025-01-01 21:18:59 -08:00
handshake_unix_test.go all: use new "unix" build tag where appropriate 2022-03-29 16:24:51 +00:00
key_agreement.go crypto/tls: implement X25519Kyber768Draft00 2024-05-22 14:56:25 +00:00
key_schedule.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
key_schedule_test.go crypto/tls: implement X25519MLKEM768 2024-11-22 04:03:12 +00:00
link_test.go all: use ":" for compiler generated symbols 2022-08-09 11:28:56 +00:00
prf.go all: rename crypto/internal/fips to crypto/internal/fips140 2024-11-20 20:28:34 +00:00
prf_test.go crypto/tls: remove SSLv3 support 2019-08-27 22:24:05 +00:00
quic.go crypto/tls: fix typo in quicError 2024-08-14 18:08:03 +00:00
quic_test.go crypto/tls: apply QUIC session event flag to QUICResumeSession events 2024-06-25 17:08:08 +00:00
ticket.go crypto/tls: improved 0-RTT QUIC API 2024-05-22 17:23:54 +00:00
ticket_test.go crypto/tls: avoid referencing potentially unused symbols in init 2023-05-26 15:24:38 +00:00
tls.go net/http: check GetConfigForClient in server.ServeTLS 2024-06-07 17:57:01 +00:00
tls_test.go crypto/tls: fix Config.Time in tests using expired certificates 2025-01-01 21:18:59 -08:00