mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-04 12:37:35 +03:00
Code Issues Projects Releases Packages Wiki Activity
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
210 commits 8 branches 42 tags 12 MiB
Find a file
Filippo Valsorda b5bf3890ae crypto/tls: disable RSA-PSS in TLS 1.2 
Most of the issues that led to the decision on #30055 were related to
incompatibility with or faulty support for RSA-PSS (#29831, #29779,
v1.5 signatures). RSA-PSS is required by TLS 1.3, but is also available
to be negotiated in TLS 1.2.

Altering TLS 1.2 behavior based on GODEBUG=tls13=1 feels surprising, so
just disable RSA-PSS entirely in TLS 1.2 until TLS 1.3 is on by default,
so breakage happens all at once.

Updates #30055

Change-Id: Iee90454a20ded8895e5302e8bcbcd32e4e3031c2
Reviewed-on: https://go-review.googlesource.com/c/160998
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Adam Langley <agl@golang.org>
2019-02-07 18:34:43 +00:00
testdata crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
alert.go crypto/tls: implement TLS 1.3 client handshake (base) 2018-11-02 22:07:02 +00:00
auth.go crypto/tls: improve error message for unsupported certificates in TLS 1.3 2018-11-30 19:11:39 +00:00
auth_test.go crypto/tls: add RSASSA-PSS support for handshake messages 2018-06-27 23:08:06 +00:00
cipher_suites.go vendor/golang_org/x: move to internal/x 2018-11-29 15:42:16 +00:00
common.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
conn.go crypto/tls: set ServerName and unset TLSUnique in ConnectionState in TLS 1.3 2018-11-12 20:44:22 +00:00
conn_test.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
example_test.go crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
generate_cert.go crypto/tls: handle errors in generate_cert.go 2018-02-13 18:14:27 +00:00
handshake_client.go crypto/tls: fix client certificates support for legacy servers 2018-11-30 19:10:38 +00:00
handshake_client_test.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
handshake_client_tls13.go crypto/tls: improve error message for unsupported certificates in TLS 1.3 2018-11-30 19:11:39 +00:00
handshake_messages.go vendor/golang_org/x: move to internal/x 2018-11-29 15:42:16 +00:00
handshake_messages_test.go crypto/tls: implement TLS 1.3 client authentication 2018-11-12 20:43:55 +00:00
handshake_server.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
handshake_server_test.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
handshake_server_tls13.go crypto/tls: send a "handshake failure" alert if the RSA key is too small 2019-01-20 20:01:48 +00:00
handshake_test.go crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
key_agreement.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00
key_schedule.go vendor/golang_org/x: move to internal/x 2018-11-29 15:42:16 +00:00
key_schedule_test.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
prf.go crypto/tls: implement TLS 1.3 client handshake (base) 2018-11-02 22:07:02 +00:00
prf_test.go crypto/tls: implement TLS 1.3 PSK authentication (client side) 2018-11-12 20:43:23 +00:00
ticket.go vendor/golang_org/x: move to internal/x 2018-11-29 15:42:16 +00:00
tls.go crypto/tls: enable TLS 1.3 and update tests 2018-11-12 20:44:39 +00:00
tls_test.go crypto/tls: disable RSA-PSS in TLS 1.2 2019-02-07 18:34:43 +00:00