Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.

anticensorshipcipher-suitesclienthellocryptogolanghandshakelow-level-tlsobfuscationparrottlstls-extension

Roland Shoemaker bedbe86783 crypto/tls: test key type when casting ... When casting the certificate public key in generateClientKeyExchange, check the type is appropriate. This prevents a panic when a server agrees to a RSA based key exchange, but then sends an ECDSA (or other) certificate. Fixes #47143 Fixes CVE-2021-34558 Thanks to Imre Rad for reporting this issue. Change-Id: Iabccacca6052769a605cccefa1216a9f7b7f6aea Reviewed-on: 1116723 Reviewed-by: Filippo Valsorda <valsorda@google.com> Reviewed-by: Katie Hockman <katiehockman@google.com> Reviewed-on: https://go-review.googlesource.com/c/go/+/334031 Trust: Filippo Valsorda <filippo@golang.org> Run-TryBot: Filippo Valsorda <filippo@golang.org> TryBot-Result: Go Bot <gobot@golang.org> Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>		2021-07-12 20:58:00 +00:00
testdata	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
alert.go	crypto/tls: add missing alert values	2020-04-01 19:32:57 +00:00
auth.go	crypto: fix PKCS space in docs	2020-07-08 17:21:49 +00:00
auth_test.go	crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String()	2020-03-11 20:02:18 +00:00
cipher_suites.go	crypto/tls: make cipher suite preference ordering automatic	2021-05-08 05:15:48 +00:00
common.go	crypto/tls: fix typo in Config.NextProtos docs	2021-06-07 15:16:23 +00:00
common_string.go	crypto/tls: add {SignatureScheme,CurveID,ClientAuthType}.String()	2020-03-11 20:02:18 +00:00
conn.go	crypto/tls: add HandshakeContext method to Conn	2021-03-16 14:05:45 +00:00
conn_test.go	crypto/tls: select only compatible chains from Certificates	2019-11-12 01:08:57 +00:00
example_test.go	crypto/tls: replace VerifyPeerCertificate example with VerifyConnection	2020-06-24 20:48:12 +00:00
generate_cert.go	all: go fmt std cmd (but revert vendor)	2021-02-20 03:54:50 +00:00
handshake_client.go	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
handshake_client_test.go	crypto/tls: enforce ALPN overlap when negotiated on both sides	2021-05-06 18:57:43 +00:00
handshake_client_tls13.go	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
handshake_messages.go	crypto/tls: send ec_points_format extension in ServerHello	2019-10-31 15:14:45 +00:00
handshake_messages_test.go	crypto/tls: rotate session keys in older TLS versions	2020-05-07 18:33:39 +00:00
handshake_server.go	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
handshake_server_test.go	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
handshake_server_tls13.go	crypto/tls: let HTTP/1.1 clients connect to servers with NextProtos "h2"	2021-06-10 12:41:37 +00:00
handshake_test.go	crypto/tls: make cipher suite preference ordering automatic	2021-05-08 05:15:48 +00:00
handshake_unix_test.go	all: go fmt std cmd (but revert vendor)	2021-02-20 03:54:50 +00:00
key_agreement.go	crypto/tls: test key type when casting	2021-07-12 20:58:00 +00:00
key_schedule.go	math/big: add (*Int).FillBytes	2020-05-05 00:36:44 +00:00
key_schedule_test.go	crypto/tls: implement TLS 1.3 cryptographic computations	2018-11-02 21:54:52 +00:00
link_test.go	all: update to use os.ReadFile, os.WriteFile, os.CreateTemp, os.MkdirTemp	2020-12-09 19:12:23 +00:00
prf.go	crypto/tls: improve error messages for invalid certificates and signatures	2019-10-30 20:18:59 +00:00
prf_test.go	crypto/tls: remove SSLv3 support	2019-08-27 22:24:05 +00:00
ticket.go	crypto/tls: remove version check when unmarshaling sessionState	2020-05-18 23:09:31 +00:00
tls.go	crypto/tls: add HandshakeContext method to Conn	2021-03-16 14:05:45 +00:00
tls_test.go	crypto/tls: make cipher suite preference ordering automatic	2021-05-08 05:15:48 +00:00