mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-04 12:37:35 +03:00
Code Issues Projects Releases Packages Wiki Activity
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
188 commits 8 branches 42 tags 12 MiB
Find a file
Filippo Valsorda ed74f7823e crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 
crypto/x509 already supports PSS signatures (with rsaEncryption OID),
and crypto/tls support was added in CL 79736. Advertise support for the
algorithms and accept them as a peer.

Note that this is about PSS signatures from regular RSA public keys.
RSA-PSS only public keys (with RSASSA-PSS OID) are supported in neither
crypto/tls nor crypto/x509. See RFC 8446, Section 4.2.3.

testdata/Server-TLSv12-ClientAuthRequested* got modified because the
CertificateRequest carries the supported signature algorithms.

The net/smtp tests changed because 512 bits keys are too small for PSS.

Based on Peter Wu's CL 79738, who did all the actual work in CL 79736.

Updates #9671

Change-Id: I4a31e9c6e152ff4c50a5c8a274edd610d5fff231
Reviewed-on: https://go-review.googlesource.com/c/146258
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Adam Langley <agl@golang.org>
2018-11-02 22:05:52 +00:00
testdata crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
alert.go crypto/tls: switch to OpenSSL 1.1.0 for test data. 2016-10-12 17:03:46 +00:00
auth.go crypto/tls,crypto/x509: normalize RFC references 2018-10-17 03:58:03 +00:00
auth_test.go crypto/tls: add RSASSA-PSS support for handshake messages 2018-06-27 23:08:06 +00:00
cipher_suites.go crypto/tls: implement TLS 1.3 record layer and cipher suites 2018-11-02 21:54:38 +00:00
common.go crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
conn.go crypto/tls: implement TLS 1.3 version-specific messages 2018-11-02 22:04:51 +00:00
conn_test.go crypto/tls: replace net.Pipe in tests with real TCP connections 2018-10-19 12:43:30 +00:00
example_test.go crypto/tls: add examples for [Load]X509KeyPair 2018-04-30 17:25:27 +00:00
generate_cert.go crypto/tls: handle errors in generate_cert.go 2018-02-13 18:14:27 +00:00
handshake_client.go crypto/tls: implement TLS 1.3 version negotiation 2018-11-02 22:05:06 +00:00
handshake_client_test.go crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
handshake_messages.go crypto/tls: implement TLS 1.3 version-specific messages 2018-11-02 22:04:51 +00:00
handshake_messages_test.go crypto/tls: implement TLS 1.3 version-specific messages 2018-11-02 22:04:51 +00:00
handshake_server.go crypto/tls: implement TLS 1.3 version negotiation 2018-11-02 22:05:06 +00:00
handshake_server_test.go crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
handshake_test.go crypto/tls: advertise and accept rsa_pss_rsae signature algorithms 2018-11-02 22:05:52 +00:00
key_agreement.go crypto/tls,crypto/x509: normalize RFC references 2018-10-17 03:58:03 +00:00
key_schedule.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
key_schedule_test.go crypto/tls: implement TLS 1.3 cryptographic computations 2018-11-02 21:54:52 +00:00
prf.go crypto/tls,crypto/x509: normalize RFC references 2018-10-17 03:58:03 +00:00
prf_test.go crypto/tls: make ConnectionState.ExportKeyingMaterial a method 2018-08-22 03:48:56 +00:00
ticket.go crypto/tls: replace custom equal implementations with reflect.DeepEqual 2018-10-25 19:07:36 +00:00
tls.go crypto/tls: remove unneeded calls to bytes.NewReader 2018-10-30 01:43:09 +00:00
tls_test.go crypto/tls: implement TLS 1.3 record layer and cipher suites 2018-11-02 21:54:38 +00:00