kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
318ec0c21a
th5/testdata/Client-TLSv12-RenegotiateOnce

248 lines
18 KiB
Plaintext
Raw Normal View History

crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 1 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 01 00 8b 01 00 00 87 03 03 00 00 00 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 28 c0 2f |.............(./|
00000030 c0 2b c0 30 c0 2c c0 27 c0 13 c0 23 c0 09 c0 14 |.+.0.,.'...#....|
00000040 c0 0a 00 9c 00 9d 00 3c 00 2f 00 35 c0 12 00 0a |.......<./.5....|
00000050 00 05 c0 11 c0 07 01 00 00 36 00 05 00 05 01 00 |.........6......|
00000060 00 00 00 00 0a 00 08 00 06 00 17 00 18 00 19 00 |................|
00000070 0b 00 02 01 00 00 0d 00 0e 00 0c 04 01 04 03 05 |................|
00000080 01 05 03 02 01 02 03 ff 01 00 01 00 00 12 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 2 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 59 02 00 00 55 03 03 24 2e 0a 13 97 |....Y...U..$....|
00000010 5a ca f1 1f 61 58 9e ab ab ab e2 02 c6 12 36 44 |Z...aX........6D|
00000020 e5 0b a4 9d 87 95 71 9f 8d af e1 20 fa 6b 55 37 |......q.... .kU7|
00000030 1f 17 a4 3b 24 9c 4f d8 f9 e1 0d 15 a0 2a d2 db |...;$.O......*..|
00000040 41 eb 9e 43 9d 59 61 24 27 28 df fc c0 2f 00 00 |A..C.Ya$'(.../..|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000050 0d ff 01 00 01 00 00 0b 00 04 03 00 01 02 16 03 |................|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000060 03 02 59 0b 00 02 55 00 02 52 00 02 4f 30 82 02 |..Y...U..R..O0..|
00000070 4b 30 82 01 b4 a0 03 02 01 02 02 09 00 e8 f0 9d |K0..............|
00000080 3f e2 5b ea a6 30 0d 06 09 2a 86 48 86 f7 0d 01 |?.[..0...*.H....|
00000090 01 0b 05 00 30 1f 31 0b 30 09 06 03 55 04 0a 13 |....0.1.0...U...|
000000a0 02 47 6f 31 10 30 0e 06 03 55 04 03 13 07 47 6f |.Go1.0...U....Go|
000000b0 20 52 6f 6f 74 30 1e 17 0d 31 36 30 31 30 31 30 | Root0...1601010|
000000c0 30 30 30 30 30 5a 17 0d 32 35 30 31 30 31 30 30 |00000Z..25010100|
000000d0 30 30 30 30 5a 30 1a 31 0b 30 09 06 03 55 04 0a |0000Z0.1.0...U..|
000000e0 13 02 47 6f 31 0b 30 09 06 03 55 04 03 13 02 47 |..Go1.0...U....G|
000000f0 6f 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 |o0..0...*.H.....|
00000100 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 db 46 |.......0.......F|
00000110 7d 93 2e 12 27 06 48 bc 06 28 21 ab 7e c4 b6 a2 |}...'.H..(!.~...|
00000120 5d fe 1e 52 45 88 7a 36 47 a5 08 0d 92 42 5b c2 |]..RE.z6G....B[.|
00000130 81 c0 be 97 79 98 40 fb 4f 6d 14 fd 2b 13 8b c2 |....y.@.Om..+...|
00000140 a5 2e 67 d8 d4 09 9e d6 22 38 b7 4a 0b 74 73 2b |..g....."8.J.ts+|
00000150 c2 34 f1 d1 93 e5 96 d9 74 7b f3 58 9f 6c 61 3c |.4......t{.X.la<|
00000160 c0 b0 41 d4 d9 2b 2b 24 23 77 5b 1c 3b bd 75 5d |..A..++$#w[.;.u]|
00000170 ce 20 54 cf a1 63 87 1d 1e 24 c4 f3 1d 1a 50 8b |. T..c...$....P.|
00000180 aa b6 14 43 ed 97 a7 75 62 f4 14 c8 52 d7 02 03 |...C...ub...R...|
00000190 01 00 01 a3 81 93 30 81 90 30 0e 06 03 55 1d 0f |......0..0...U..|
000001a0 01 01 ff 04 04 03 02 05 a0 30 1d 06 03 55 1d 25 |.........0...U.%|
000001b0 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 |..0...+.........|
000001c0 2b 06 01 05 05 07 03 02 30 0c 06 03 55 1d 13 01 |+.......0...U...|
000001d0 01 ff 04 02 30 00 30 19 06 03 55 1d 0e 04 12 04 |....0.0...U.....|
000001e0 10 9f 91 16 1f 43 43 3e 49 a6 de 6d b6 80 d7 9f |.....CC>I..m....|
000001f0 60 30 1b 06 03 55 1d 23 04 14 30 12 80 10 48 13 |`0...U.#..0...H.|
00000200 49 4d 13 7e 16 31 bb a3 01 d5 ac ab 6e 7b 30 19 |IM.~.1......n{0.|
00000210 06 03 55 1d 11 04 12 30 10 82 0e 65 78 61 6d 70 |..U....0...examp|
00000220 6c 65 2e 67 6f 6c 61 6e 67 30 0d 06 09 2a 86 48 |le.golang0...*.H|
00000230 86 f7 0d 01 01 0b 05 00 03 81 81 00 9d 30 cc 40 |.............0.@|
00000240 2b 5b 50 a0 61 cb ba e5 53 58 e1 ed 83 28 a9 58 |+[P.a...SX...(.X|
00000250 1a a9 38 a4 95 a1 ac 31 5a 1a 84 66 3d 43 d3 2d |..8....1Z..f=C.-|
00000260 d9 0b f2 97 df d3 20 64 38 92 24 3a 00 bc cf 9c |...... d8.$:....|
00000270 7d b7 40 20 01 5f aa d3 16 61 09 a2 76 fd 13 c3 |}.@ ._...a..v...|
00000280 cc e1 0c 5c ee b1 87 82 f1 6c 04 ed 73 bb b3 43 |...\.....l..s..C|
00000290 77 8d 0c 1c f1 0f a1 d8 40 83 61 c9 4c 72 2b 9d |w.......@.a.Lr+.|
000002a0 ae db 46 06 06 4d f4 c1 b3 3e c0 d1 bd 42 d4 db |..F..M...>...B..|
000002b0 fe 3d 13 60 84 5c 21 d3 3b e9 fa e7 16 03 03 00 |.=.`.\!.;.......|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
000002c0 cd 0c 00 00 c9 03 00 17 41 04 9d 0b 44 e7 57 91 |........A...D.W.|
000002d0 5f 24 93 7d cb f4 5a 8c 66 1f 55 ba fb 7e 95 47 |_$.}..Z.f.U..~.G|
000002e0 58 65 b6 df d5 67 11 fe 98 39 c1 5d 39 fd ab 48 |Xe...g...9.]9..H|
000002f0 17 19 78 15 22 ee a9 41 b2 e7 3f 0c 08 23 8d b5 |..x."..A..?..#..|
00000300 77 b8 b4 aa 94 e3 1e cb 6e 31 04 01 00 80 c2 6d |w.......n1.....m|
00000310 39 91 f4 54 ef c0 73 8c d2 cd 37 c8 b6 74 8c 12 |9..T..s...7..t..|
00000320 87 bb 68 fb ac f1 ae a2 01 ed 1f 55 90 1f fb 92 |..h........U....|
00000330 d3 a8 c3 ac 19 7e bf b6 e9 2e 2f 1d bd 4a fa 17 |.....~..../..J..|
00000340 1e dc dd 41 c6 8d d4 3f 2d c3 13 0d d0 86 6f 8e |...A...?-.....o.|
00000350 74 5a 51 47 6e f2 18 f8 e2 ba de 75 1a 81 1c 3b |tZQGn......u...;|
00000360 f0 dc ab d8 5d 7a da 6e 91 d3 e5 f0 82 c3 be c9 |....]z.n........|
00000370 c8 f0 c9 60 84 6f c3 59 7f 6b 7a b2 58 72 6b 79 |...`.o.Y.kz.Xrky|
00000380 44 cc 04 82 86 ad 93 de d1 11 c1 a4 be cd 16 03 |D...............|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000390 03 00 04 0e 00 00 00 |.......|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 3 (client to server)
00000000 16 03 03 00 46 10 00 00 42 41 04 1e 18 37 ef 0d |....F...BA...7..|
00000010 19 51 88 35 75 71 b5 e5 54 5b 12 2e 8f 09 67 fd |.Q.5uq..T[....g.|
00000020 a7 24 20 3e b2 56 1c ce 97 28 5e f8 2b 2d 4f 9e |.$ >.V...(^.+-O.|
00000030 f1 07 9f 6c 4b 5b 83 56 e2 32 42 e9 58 b6 d7 49 |...lK[.V.2B.X..I|
00000040 a6 b5 68 1a 41 03 56 6b dc 5a 89 14 03 03 00 01 |..h.A.Vk.Z......|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000050 01 16 03 03 00 28 00 00 00 00 00 00 00 00 37 ca |.....(........7.|
00000060 4e 62 c8 3d 33 b1 2c 57 fd 47 b0 78 5f e3 ac ee |Nb.=3.,W.G.x_...|
00000070 ae 3d ad 74 a8 2c ee b1 e8 b7 ff 6f 35 c7 |.=.t.,.....o5.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 4 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 14 03 03 00 01 01 16 03 03 00 28 6b be a8 12 9c |..........(k....|
00000010 7f 20 af 07 a8 dd e0 c7 bc 45 b1 ba 32 c1 df 3e |. .......E..2..>|
00000020 d5 a1 a8 56 1b 1a 69 d1 ac c7 bc 75 79 f7 6a ce |...V..i....uy.j.|
00000030 83 22 78 |."x|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 5 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 17 03 03 00 1e 00 00 00 00 00 00 00 01 40 90 1f |.............@..|
00000010 c0 46 3a 8b af a2 54 69 9d 90 90 49 da ad ff 53 |.F:...Ti...I...S|
00000020 91 e7 65 |..e|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 6 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 1c 6b be a8 12 9c 7f 20 b0 28 6b 34 |.....k..... .(k4|
00000010 63 e8 5e 88 ef f0 79 bb af 67 f6 f7 08 fe 7f d5 |c.^...y..g......|
00000020 5c |\|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 7 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 af 00 00 00 00 00 00 00 02 01 a6 70 |...............p|
00000010 01 49 e5 57 72 ad db 39 c6 d6 63 27 9a 8b d3 13 |.I.Wr..9..c'....|
00000020 06 15 ef ea 59 6c eb e4 a4 e3 7d 98 84 b9 60 6f |....Yl....}...`o|
00000030 f9 ad 01 a1 20 e0 43 a4 58 c8 c6 da f4 1c 06 2c |.... .C.X......,|
00000040 51 1a 70 b7 d2 8b ed c3 f7 ce f4 17 e5 82 d2 3e |Q.p............>|
00000050 1e f0 23 62 60 2e 21 b3 5b 99 ac b8 f6 11 40 fb |..#b`.!.[.....@.|
00000060 b9 51 17 ac ab ac b4 ff f9 b0 27 d3 a8 2e 41 4f |.Q........'...AO|
00000070 fe e3 64 3c bd 34 6a e1 18 64 bd 5f 24 b4 3b 57 |..d<.4j..d._$.;W|
00000080 4e 4e 8e a0 b0 3d 50 e3 b0 d2 bc 45 d7 84 4f 11 |NN...=P....E..O.|
00000090 fd 6a 52 0d a9 36 9f 0e 57 4f 43 24 50 12 b8 ba |.jR..6..WOC$P...|
000000a0 b4 30 4f 21 3d de 56 af 3d 6d 07 32 b9 4c 32 95 |.0O!=.V.=m.2.L2.|
000000b0 c6 eb 6c a6 |..l.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 8 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 89 6b be a8 12 9c 7f 20 b1 ac ca 6b |.....k..... ...k|
00000010 51 a3 1e 19 95 56 8f 88 ee 40 fa 47 7d f6 30 29 |Q....V...@.G}.0)|
00000020 2f 26 4c 22 04 41 07 76 f1 3a 1b b0 98 46 93 36 |/&L".A.v.:...F.6|
00000030 d8 02 bd b9 82 f4 34 4f 7e 45 10 4e 14 53 31 c7 |......4O~E.N.S1.|
00000040 3e 1e 74 f3 29 5e cf 77 39 76 9e 00 fd 1f 2a 3c |>.t.)^.w9v....*<|
00000050 63 b1 fa c7 a6 31 a4 76 ea e8 95 af 5a 56 fc 23 |c....1.v....ZV.#|
00000060 03 15 0a 79 14 fd 6c 83 0b 82 db 6a 1d a4 c1 19 |...y..l....j....|
00000070 9d 3c 3d ea e2 f1 04 82 6c b3 27 00 3b 51 8d 74 |.<=.....l.'.;Q.t|
00000080 86 b6 d0 d7 81 f3 da 0d bf bf bd 57 c3 a9 16 03 |...........W....|
00000090 03 02 71 6b be a8 12 9c 7f 20 b2 3d 86 e6 bb 0e |..qk..... .=....|
000000a0 35 57 79 c3 ea 0a 90 cf 0f ef 36 9f 3f 1f f8 de |5Wy.......6.?...|
000000b0 56 2e f5 b8 8c a7 ac 59 cb 59 dc ec c1 ae d4 22 |V......Y.Y....."|
000000c0 25 2f 53 c9 d1 e0 fc 94 9f b6 ef a5 21 6e 90 11 |%/S.........!n..|
000000d0 04 48 6a a6 ca 00 78 7d ff 87 cd 04 0b 01 9a da |.Hj...x}........|
000000e0 c6 90 cd 24 fe cb 83 5a 9a 4d 3a 1d 90 a2 49 ca |...$...Z.M:...I.|
000000f0 3a 50 98 c1 68 36 d8 b9 4e 3e 2b c9 9e a9 1a a3 |:P..h6..N>+.....|
00000100 95 b3 d7 cd b7 83 58 5f a2 a1 1d ee e4 89 be ab |......X_........|
00000110 1f f0 36 13 1d 69 22 60 e1 1b d7 0b b7 3d 32 4a |..6..i"`.....=2J|
00000120 43 3e 77 16 42 ff 42 2c 55 7c 62 14 37 21 23 88 |C>w.B.B,U|b.7!#.|
00000130 e1 e3 34 4a 6f 1e d9 b4 ca ca 95 10 4b 0b fc 4a |..4Jo.......K..J|
00000140 57 be e8 cf e1 2c c7 09 68 0b b3 a1 cf 6f f4 d6 |W....,..h....o..|
00000150 ea bf d9 a4 95 40 e4 4b 54 59 02 8f 00 48 28 42 |.....@.KTY...H(B|
00000160 3c 51 8e 6b 61 b8 2e 9a 8a ad c1 2e 0c 32 6a b1 |<Q.ka........2j.|
00000170 bb de 29 3e 41 5f d9 c7 e3 ad 59 60 cb ae 63 95 |..)>A_....Y`..c.|
00000180 82 c6 de 53 bd 90 a8 0b f3 68 36 68 82 40 86 53 |...S.....h6h.@.S|
00000190 a9 4c 7b f3 f4 ae 98 a4 4b fb fd a7 5b 81 f0 dc |.L{.....K...[...|
000001a0 ad dc a6 e2 90 8a 4e 8c 61 8d 6f cc 29 c4 5d 05 |......N.a.o.).].|
000001b0 9b 99 0a df a1 e2 dd a0 f6 4e e1 54 4f 7f a7 73 |.........N.TO..s|
000001c0 6c ec cc 31 f8 fe aa f3 e7 ce a0 7c 67 74 25 f5 |l..1.......|gt%.|
000001d0 ba a4 33 92 2a c1 51 b2 0c 31 ea 6f 80 18 13 3c |..3.*.Q..1.o...<|
000001e0 0a b1 b2 8b bc 1b fd 6e 4c 84 2d 42 95 15 5c 73 |.......nL.-B..\s|
000001f0 9b 06 c5 4a dd f5 59 f4 28 c0 d5 40 26 03 a1 d1 |...J..Y.(..@&...|
00000200 13 03 67 23 78 c0 c5 02 8e 42 0d 98 60 3c c9 9e |..g#x....B..`<..|
00000210 49 86 1a a1 6e d1 3a 66 3a 13 15 37 d3 e8 ca d0 |I...n.:f:..7....|
00000220 ee 2e 17 1b 37 6a dd 00 c3 b2 e8 9c 0d 91 d2 3e |....7j.........>|
00000230 3f cd 6d e3 f1 5c 45 30 94 be cf 65 54 c5 66 26 |?.m..\E0...eT.f&|
00000240 e0 d3 46 9f f2 ba 67 30 90 c0 1b 58 05 1c 98 b1 |..F...g0...X....|
00000250 8a a6 02 5c 5a f1 ec a0 d2 74 71 4c a3 15 f8 a7 |...\Z....tqL....|
00000260 34 d6 9c dd 31 b1 5e 4e 97 7f 1d c5 31 7f c1 cb |4...1.^N....1...|
00000270 8b 3c 88 6a 96 71 a0 a3 8e d8 7a 0a ed 67 f5 04 |.<.j.q....z..g..|
00000280 1d 47 ab db bf 3e f6 f6 c8 6e 55 6f e9 9a bf b4 |.G...>...nUo....|
00000290 8f 8b ac 9c 56 3d e0 37 8d 85 02 06 1e 5b 52 d3 |....V=.7.....[R.|
000002a0 ba 75 70 33 da c0 d9 77 a1 59 30 75 a1 6f 4e dc |.up3...w.Y0u.oN.|
000002b0 ba da 4d 7b bc b5 8d b5 74 6a bc 64 82 d5 cf 41 |..M{....tj.d...A|
000002c0 88 dc 0a 6c 9b 36 46 5b e9 2e 62 b7 1a 44 57 6f |...l.6F[..b..DWo|
000002d0 e7 28 bc 47 91 25 2e 56 d6 08 df c0 b5 9e ee fe |.(.G.%.V........|
000002e0 bd c5 cf f4 94 ab 03 30 8d a9 a7 d0 eb b8 a4 96 |.......0........|
000002f0 dd 58 35 4f 4e fb 49 11 39 e3 a3 46 06 0b 2a f2 |.X5ON.I.9..F..*.|
00000300 d9 29 08 1c 16 03 03 00 e5 6b be a8 12 9c 7f 20 |.).......k..... |
00000310 b3 5a a8 60 49 b5 0f 3d 50 bf 81 17 ca 25 2d 91 |.Z.`I..=P....%-.|
00000320 07 bd 01 ef bc 13 df 67 50 c4 7d aa 87 af b4 30 |.......gP.}....0|
00000330 95 08 a9 1a 86 f2 60 d9 85 28 11 1c 3c 31 81 5d |......`..(..<1.]|
00000340 3c 83 b0 3c 0d 59 11 8b 3b d6 76 f4 64 98 d2 4c |<..<.Y..;.v.d..L|
00000350 09 f5 fc 4a 43 d6 e8 5c c5 f7 ed c2 7f 35 df 96 |...JC..\.....5..|
00000360 3d ca a8 59 58 e4 22 c7 58 99 40 ee c7 71 fb 8d |=..YX.".X.@..q..|
00000370 14 14 42 db 12 fa a8 0e 9f 45 d3 29 73 7f bf a0 |..B......E.)s...|
00000380 20 30 8f 2f 93 f1 45 44 3a 30 28 4a fd 5b 49 49 | 0./..ED:0(J.[II|
00000390 46 6d 71 ef b7 77 7d 83 0a 62 a0 82 d3 4d c1 69 |Fmq..w}..b...M.i|
000003a0 7b 79 a6 92 79 4d 6b 6d f3 e7 e3 75 c0 30 b3 83 |{y..yMkm...u.0..|
000003b0 b9 d4 1d 0b 23 18 e6 79 87 c7 af 3e 18 23 2f 6e |....#..y...>.#/n|
000003c0 95 12 54 8a fb 9f 9f c0 df f9 9e 06 67 a0 d7 85 |..T.........g...|
000003d0 71 56 8a 52 1c aa 3a 3f 9e 5e bb 25 16 7d ef 8e |qV.R..:?.^.%.}..|
000003e0 58 fd 83 7b be 8e e4 d5 26 53 3e 03 f7 67 16 03 |X..{....&S>..g..|
000003f0 03 00 46 6b be a8 12 9c 7f 20 b4 6e d6 b0 9c 25 |..Fk..... .n...%|
00000400 b0 f6 49 1e 44 5f 96 3d 72 8c c8 71 9b 0a 15 61 |..I.D_.=r..q...a|
00000410 f2 0c df 14 1b 59 9b 88 5d f2 04 83 3e 42 56 15 |.....Y..]...>BV.|
00000420 55 8b 47 13 be f5 7f 61 81 22 c1 32 b7 59 8c 59 |U.G....a.".2.Y.Y|
00000430 68 a2 be ad e1 05 36 be 22 |h.....6."|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 9 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 02 71 00 00 00 00 00 00 00 03 d8 60 1e |....q.........`.|
00000010 b5 63 15 89 4b 48 76 a0 68 68 ff 3e eb 36 e8 05 |.c..KHv.hh.>.6..|
00000020 e4 fb 3d 35 94 88 93 9f aa f5 30 3f cf 6a 3f fc |..=5......0?.j?.|
00000030 1e c4 bd 71 d8 e9 de 64 92 d0 0f 49 70 f5 1b 3e |...q...d...Ip..>|
00000040 ac 8f 00 53 3b d7 65 b8 ef 95 80 29 9f 59 f4 3e |...S;.e....).Y.>|
00000050 a5 cc 35 00 b1 04 ef 0b 79 d2 22 39 0c 1e 07 96 |..5.....y."9....|
00000060 a6 d1 01 18 2f 38 a7 96 c5 e6 5b 3d f4 04 f9 92 |..../8....[=....|
00000070 b1 1d 4d 4c a6 50 5c dd 28 f9 41 25 9d 05 90 7d |..ML.P\.(.A%...}|
00000080 3f da 37 c8 92 45 ff 18 e6 79 da ee 32 e1 0c ff |?.7..E...y..2...|
00000090 36 d8 ee ea e8 04 0b ad 7e 9f e7 53 9d b9 10 91 |6.......~..S....|
000000a0 02 69 71 b0 2d 9a 67 0c 75 27 48 16 db 0c 41 68 |.iq.-.g.u'H...Ah|
000000b0 4d 50 5b 24 c4 2d 94 54 23 9b ff 8c fc 40 28 45 |MP[$.-.T#....@(E|
000000c0 22 a6 75 1b d8 82 07 61 33 d7 69 4b 7b 97 c2 70 |".u....a3.iK{..p|
000000d0 a2 30 93 7a 4f 66 13 03 d3 9a 5d ee f9 74 7e 26 |.0.zOf....]..t~&|
000000e0 46 31 0f c6 27 42 ba f9 ea 4d 30 37 4e 22 3f 20 |F1..'B...M07N"? |
000000f0 79 4d 0b a1 55 dd 72 45 2f af 17 d0 d7 19 22 93 |yM..U.rE/.....".|
00000100 4e 15 50 01 df 69 79 82 c6 35 a4 30 4e ca 1f d8 |N.P..iy..5.0N...|
00000110 06 c9 f2 03 3c a1 95 3e 18 e9 6c 46 2e fc 61 b4 |....<..>..lF..a.|
00000120 90 6f 07 70 dc 9f eb a8 f1 a5 5e ed 07 26 24 e9 |.o.p......^..&$.|
00000130 6f ee 34 39 03 e0 2d da b2 bf e2 b7 8a 89 d4 49 |o.49..-........I|
00000140 b6 40 56 81 59 b6 81 6a a9 92 71 f7 f3 16 c8 cc |.@V.Y..j..q.....|
00000150 da bb 7f 54 fd 5f 6d 36 52 f6 da f5 2b fa 3d 1b |...T._m6R...+.=.|
00000160 05 4c a7 04 0d 0b 04 6c 73 8a 22 c2 3b 4b e6 12 |.L.....ls.".;K..|
00000170 7e 0d 7c 4e c1 20 4d d8 fd e9 3b 8a 38 33 7d e2 |~.|N. M...;.83}.|
00000180 10 9b 38 40 4c 50 c9 82 53 4d c3 da cf 6c 13 45 |..8@LP..SM...l.E|
00000190 0e cc 89 bf 1f ae 83 06 2b 09 c0 69 7e 72 23 e3 |........+..i~r#.|
000001a0 c9 8f 45 d4 fa 19 98 f3 c8 a1 d7 15 a4 e6 08 9b |..E.............|
000001b0 83 3f fd b5 7d 8f b1 b4 e4 5f 87 01 a0 e3 27 6a |.?..}...._....'j|
000001c0 e1 59 7c 46 0d eb 7c a3 ba e6 95 ad de f2 5b 72 |.Y|F..|.......[r|
000001d0 61 c6 a6 14 31 f9 3b 03 d8 62 88 0e 44 78 b3 0f |a...1.;..b..Dx..|
000001e0 78 5e b7 63 58 3c c5 ae 2c 0c 3d 8e 38 84 dc 29 |x^.cX<..,.=.8..)|
000001f0 c1 d0 1c 8d e7 97 8c 29 7a c3 82 02 6b 1f c0 0d |.......)z...k...|
00000200 c4 a0 fa 58 3a 2c e0 d4 7a 50 16 d6 ac d7 ef db |...X:,..zP......|
00000210 a6 56 7b eb 5b 82 c7 98 73 8d d6 64 ed 5b ae e7 |.V{.[...s..d.[..|
00000220 c6 20 38 80 ca d1 39 36 d8 e9 4f 88 e1 ec f9 5c |. 8...96..O....\|
00000230 37 44 85 22 f2 ea fb 2e e5 1c e3 e7 c7 7b 89 3f |7D.".........{.?|
00000240 b1 ce 79 cb f6 a6 9e e1 93 a2 00 d8 92 74 e9 b5 |..y..........t..|
00000250 f8 42 a4 db e4 c8 20 66 aa 7c 07 c4 51 47 a1 93 |.B.... f.|..QG..|
00000260 30 44 2d 76 31 96 57 c6 d8 56 0b 86 ec 60 04 12 |0D-v1.W..V...`..|
00000270 df e1 bd 08 a3 12 16 03 03 00 5e 00 00 00 00 00 |..........^.....|
00000280 00 00 04 07 11 86 09 09 10 67 9a 92 bc a2 c2 e0 |.........g......|
00000290 61 ae 42 88 0f 6f b5 ac ce 12 2f 50 c2 df 68 28 |a.B..o..../P..h(|
000002a0 b6 cf 3b 96 8a 5e 24 e4 89 24 61 0e ed e7 7e 62 |..;..^$..$a...~b|
000002b0 4c 0d 16 75 53 d1 aa 18 78 5b bd c6 86 3b cd 75 |L..uS...x[...;.u|
000002c0 bb 79 d0 03 58 b6 88 db 5b 65 1c be 07 c3 e0 87 |.y..X...[e......|
000002d0 82 3f 63 0f 69 7c 51 db 14 16 03 03 00 a0 00 00 |.?c.i|Q.........|
000002e0 00 00 00 00 00 05 ce ef 43 c5 92 c0 7a 3a 52 58 |........C...z:RX|
000002f0 b1 2d c5 1a 81 64 28 de 85 30 d2 ce c0 cc cd f5 |.-...d(..0......|
00000300 63 ae 2c 0d 83 4b 4f 18 b3 bb 56 1a 2f fb 2a 9b |c.,..KO...V./.*.|
00000310 cd 95 2b 3d 97 76 61 41 00 30 90 8c 3c f0 ed 2d |..+=.vaA.0..<..-|
00000320 be 10 6e e9 4f df 0a ba 63 63 8d 57 8f 67 b5 d0 |..n.O...cc.W.g..|
00000330 f7 18 34 5d c1 a1 c2 b2 6a aa c3 86 1e d0 e9 9b |..4]....j.......|
00000340 a6 52 81 09 3d 57 df f2 e7 ff a0 68 69 bc a0 2c |.R..=W.....hi..,|
00000350 64 c3 fe 19 5b 34 86 94 60 d2 ef 7e 7e 9b 80 2b |d...[4..`..~~..+|
00000360 09 65 58 02 7c a8 34 31 de 40 0c 56 12 34 5f 95 |.eX.|.41.@.V.4_.|
00000370 42 77 06 fb fb 94 e5 15 7a 0c 09 17 47 d2 14 03 |Bw......z...G...|
00000380 03 00 19 00 00 00 00 00 00 00 06 91 c8 31 cf f8 |.............1..|
00000390 95 ed 07 68 c4 1c 39 2c 33 16 1f e8 16 03 03 00 |...h..9,3.......|
000003a0 28 00 00 00 00 00 00 00 00 24 86 17 13 83 e0 8d |(........$......|
000003b0 cf d0 3a e7 66 18 f0 4c 53 16 a1 77 6d ab 65 b9 |..:.f..LS..wm.e.|
000003c0 8d 12 cc 5b 4b f6 29 df 17 |...[K.)..|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 10 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 14 03 03 00 19 6b be a8 12 9c 7f 20 b5 ab b8 9e |.....k..... ....|
00000010 f3 24 cd 36 cf ac 42 6e 4b 5e 48 3a c7 68 16 03 |.$.6..BnK^H:.h..|
00000020 03 00 28 48 74 d1 24 fc 16 53 84 41 00 a0 53 54 |..(Ht.$..S.A..ST|
00000030 57 fe dd 26 0b 06 d9 21 1a 54 f8 6a c7 0b 7c c5 |W..&...!.T.j..|.|
00000040 44 3d 7a c1 9a ec 01 3f 7d 85 d7 17 03 03 00 21 |D=z....?}......!|
00000050 48 74 d1 24 fc 16 53 85 cb 06 31 e3 d4 a1 2f c7 |Ht.$..S...1.../.|
00000060 98 cf 56 62 9f c0 a1 eb 06 76 ab 3b e9 e5 f1 55 |..Vb.....v.;...U|
00000070 06 |.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 11 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 15 03 03 00 1a 00 00 00 00 00 00 00 01 ab d8 53 |...............S|
00000010 c0 34 01 ff f7 d8 20 95 c3 57 0e 03 6c 6e 9b |.4.... ..W..ln.|
Reference in New Issue Copy Permalink