kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
318ec0c21a
th5/testdata/Client-TLSv12-RenegotiateTwiceRejected

252 lines
19 KiB
Plaintext
Raw Normal View History

crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 1 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 01 00 8b 01 00 00 87 03 03 00 00 00 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 28 c0 2f |.............(./|
00000030 c0 2b c0 30 c0 2c c0 27 c0 13 c0 23 c0 09 c0 14 |.+.0.,.'...#....|
00000040 c0 0a 00 9c 00 9d 00 3c 00 2f 00 35 c0 12 00 0a |.......<./.5....|
00000050 00 05 c0 11 c0 07 01 00 00 36 00 05 00 05 01 00 |.........6......|
00000060 00 00 00 00 0a 00 08 00 06 00 17 00 18 00 19 00 |................|
00000070 0b 00 02 01 00 00 0d 00 0e 00 0c 04 01 04 03 05 |................|
00000080 01 05 03 02 01 02 03 ff 01 00 01 00 00 12 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 2 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 59 02 00 00 55 03 03 ba 6e a4 42 66 |....Y...U...n.Bf|
00000010 66 03 9a fd 7d 88 99 9d 83 50 d1 0f a2 3c d0 f2 |f...}....P...<..|
00000020 50 bc b2 28 55 de 77 9e 89 d9 db 20 54 0e f3 e7 |P..(U.w.... T...|
00000030 ec e4 8f 8c ef cf ad 4a c5 22 7c b9 09 cd ca 4a |.......J."|....J|
00000040 9a 3c 48 d5 23 2d d1 de 3d a8 66 40 c0 2f 00 00 |.<H.#-..=.f@./..|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000050 0d ff 01 00 01 00 00 0b 00 04 03 00 01 02 16 03 |................|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000060 03 02 59 0b 00 02 55 00 02 52 00 02 4f 30 82 02 |..Y...U..R..O0..|
00000070 4b 30 82 01 b4 a0 03 02 01 02 02 09 00 e8 f0 9d |K0..............|
00000080 3f e2 5b ea a6 30 0d 06 09 2a 86 48 86 f7 0d 01 |?.[..0...*.H....|
00000090 01 0b 05 00 30 1f 31 0b 30 09 06 03 55 04 0a 13 |....0.1.0...U...|
000000a0 02 47 6f 31 10 30 0e 06 03 55 04 03 13 07 47 6f |.Go1.0...U....Go|
000000b0 20 52 6f 6f 74 30 1e 17 0d 31 36 30 31 30 31 30 | Root0...1601010|
000000c0 30 30 30 30 30 5a 17 0d 32 35 30 31 30 31 30 30 |00000Z..25010100|
000000d0 30 30 30 30 5a 30 1a 31 0b 30 09 06 03 55 04 0a |0000Z0.1.0...U..|
000000e0 13 02 47 6f 31 0b 30 09 06 03 55 04 03 13 02 47 |..Go1.0...U....G|
000000f0 6f 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 |o0..0...*.H.....|
00000100 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 db 46 |.......0.......F|
00000110 7d 93 2e 12 27 06 48 bc 06 28 21 ab 7e c4 b6 a2 |}...'.H..(!.~...|
00000120 5d fe 1e 52 45 88 7a 36 47 a5 08 0d 92 42 5b c2 |]..RE.z6G....B[.|
00000130 81 c0 be 97 79 98 40 fb 4f 6d 14 fd 2b 13 8b c2 |....y.@.Om..+...|
00000140 a5 2e 67 d8 d4 09 9e d6 22 38 b7 4a 0b 74 73 2b |..g....."8.J.ts+|
00000150 c2 34 f1 d1 93 e5 96 d9 74 7b f3 58 9f 6c 61 3c |.4......t{.X.la<|
00000160 c0 b0 41 d4 d9 2b 2b 24 23 77 5b 1c 3b bd 75 5d |..A..++$#w[.;.u]|
00000170 ce 20 54 cf a1 63 87 1d 1e 24 c4 f3 1d 1a 50 8b |. T..c...$....P.|
00000180 aa b6 14 43 ed 97 a7 75 62 f4 14 c8 52 d7 02 03 |...C...ub...R...|
00000190 01 00 01 a3 81 93 30 81 90 30 0e 06 03 55 1d 0f |......0..0...U..|
000001a0 01 01 ff 04 04 03 02 05 a0 30 1d 06 03 55 1d 25 |.........0...U.%|
000001b0 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 |..0...+.........|
000001c0 2b 06 01 05 05 07 03 02 30 0c 06 03 55 1d 13 01 |+.......0...U...|
000001d0 01 ff 04 02 30 00 30 19 06 03 55 1d 0e 04 12 04 |....0.0...U.....|
000001e0 10 9f 91 16 1f 43 43 3e 49 a6 de 6d b6 80 d7 9f |.....CC>I..m....|
000001f0 60 30 1b 06 03 55 1d 23 04 14 30 12 80 10 48 13 |`0...U.#..0...H.|
00000200 49 4d 13 7e 16 31 bb a3 01 d5 ac ab 6e 7b 30 19 |IM.~.1......n{0.|
00000210 06 03 55 1d 11 04 12 30 10 82 0e 65 78 61 6d 70 |..U....0...examp|
00000220 6c 65 2e 67 6f 6c 61 6e 67 30 0d 06 09 2a 86 48 |le.golang0...*.H|
00000230 86 f7 0d 01 01 0b 05 00 03 81 81 00 9d 30 cc 40 |.............0.@|
00000240 2b 5b 50 a0 61 cb ba e5 53 58 e1 ed 83 28 a9 58 |+[P.a...SX...(.X|
00000250 1a a9 38 a4 95 a1 ac 31 5a 1a 84 66 3d 43 d3 2d |..8....1Z..f=C.-|
00000260 d9 0b f2 97 df d3 20 64 38 92 24 3a 00 bc cf 9c |...... d8.$:....|
00000270 7d b7 40 20 01 5f aa d3 16 61 09 a2 76 fd 13 c3 |}.@ ._...a..v...|
00000280 cc e1 0c 5c ee b1 87 82 f1 6c 04 ed 73 bb b3 43 |...\.....l..s..C|
00000290 77 8d 0c 1c f1 0f a1 d8 40 83 61 c9 4c 72 2b 9d |w.......@.a.Lr+.|
000002a0 ae db 46 06 06 4d f4 c1 b3 3e c0 d1 bd 42 d4 db |..F..M...>...B..|
000002b0 fe 3d 13 60 84 5c 21 d3 3b e9 fa e7 16 03 03 00 |.=.`.\!.;.......|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
000002c0 cd 0c 00 00 c9 03 00 17 41 04 ae d5 bb e6 16 6e |........A......n|
000002d0 a7 1f 64 fe b4 af 97 f7 4d 19 46 27 43 ac 23 d2 |..d.....M.F'C.#.|
000002e0 f8 6f 9b 46 cb 29 d7 68 4c 92 a1 56 12 81 98 54 |.o.F.).hL..V...T|
000002f0 af fd 12 59 29 a4 dd fa 55 16 c9 54 64 97 a5 f2 |...Y)...U..Td...|
00000300 ff 44 45 fe 58 3b 01 2b 8a db 04 01 00 80 71 87 |.DE.X;.+......q.|
00000310 f6 4c f5 10 02 e6 f6 11 eb 02 11 1a 2e 73 85 90 |.L...........s..|
00000320 ea 60 d1 63 cc eb 4c 65 b5 dc 47 55 51 52 42 d5 |.`.c..Le..GUQRB.|
00000330 06 e6 0c 91 e1 92 e1 1e 46 53 0c 46 55 b8 50 c6 |........FS.FU.P.|
00000340 79 cd 31 76 77 89 1c 4f 16 af c0 d5 93 ac c4 03 |y.1vw..O........|
00000350 6b 13 ec 89 93 1a 65 e2 3a cb c5 58 22 41 99 29 |k.....e.:..X"A.)|
00000360 25 0c af 53 fc 76 3e 34 1e fd 7c 64 ce 0b f9 04 |%..S.v>4..|d....|
00000370 df 67 eb 25 b8 32 96 6b 95 fa 60 fe 1c 47 41 99 |.g.%.2.k..`..GA.|
00000380 e6 eb 6d 73 5d 9c 2d e0 7f e0 0e bd 09 ce 16 03 |..ms].-.........|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000390 03 00 04 0e 00 00 00 |.......|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 3 (client to server)
00000000 16 03 03 00 46 10 00 00 42 41 04 1e 18 37 ef 0d |....F...BA...7..|
00000010 19 51 88 35 75 71 b5 e5 54 5b 12 2e 8f 09 67 fd |.Q.5uq..T[....g.|
00000020 a7 24 20 3e b2 56 1c ce 97 28 5e f8 2b 2d 4f 9e |.$ >.V...(^.+-O.|
00000030 f1 07 9f 6c 4b 5b 83 56 e2 32 42 e9 58 b6 d7 49 |...lK[.V.2B.X..I|
00000040 a6 b5 68 1a 41 03 56 6b dc 5a 89 14 03 03 00 01 |..h.A.Vk.Z......|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000050 01 16 03 03 00 28 00 00 00 00 00 00 00 00 4d 08 |.....(........M.|
00000060 a0 d2 73 1b 90 01 0b a7 b2 27 57 18 d5 3e 62 fd |..s......'W..>b.|
00000070 e5 3c 66 1d 67 30 48 aa ca 8a 37 9b ae 40 |.<f.g0H...7..@|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 4 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 14 03 03 00 01 01 16 03 03 00 28 87 4f 0d 27 74 |..........(.O.'t|
00000010 8d 74 48 06 3e da b1 83 fb c6 ea 8b 9b dc 62 6a |.tH.>.........bj|
00000020 4d 1d e3 bb 3a 60 96 31 78 5b 07 08 9b 0a a2 f0 |M...:`.1x[......|
00000030 c1 08 1a |...|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 5 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 17 03 03 00 1e 00 00 00 00 00 00 00 01 ed 2e c7 |................|
00000010 81 e8 34 ad f4 1a 42 3b ae 29 3c 8d 89 6d 73 b7 |..4...B;.)<..ms.|
00000020 4c 54 33 |LT3|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 6 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 1c 87 4f 0d 27 74 8d 74 49 44 5e 78 |......O.'t.tID^x|
00000010 ed a3 08 d8 53 1b 88 01 e2 a3 39 36 77 80 18 d8 |....S.....96w...|
00000020 93 |.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 7 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 af 00 00 00 00 00 00 00 02 0e a0 bf |................|
00000010 81 6e 32 ab 30 25 62 0a 1d 70 8d 55 58 e2 df e0 |.n2.0%b..p.UX...|
00000020 8a ff 21 1d 1c 23 be 25 19 d8 bc 8c 72 ec 72 46 |..!..#.%....r.rF|
00000030 ca 08 97 c6 96 65 80 cc 1b f3 ef a3 77 99 07 ca |.....e......w...|
00000040 dd 3b 3b 22 4b f0 04 db 50 8b 9d 5a 05 1d 4c 38 |.;;"K...P..Z..L8|
00000050 2d bd 29 d5 d7 35 5f 5d af 00 98 da 3f f2 b8 58 |-.)..5_]....?..X|
00000060 73 a3 fa 51 0f 32 33 1f ed 60 1b 6b 23 de 77 17 |s..Q.23..`.k#.w.|
00000070 5b 9a 8b 05 a9 5e 75 cb 41 c0 6d 42 f4 9a eb 8a |[....^u.A.mB....|
00000080 79 cb e6 42 3f 2a da 34 87 07 14 db 60 ee af 8e |y..B?*.4....`...|
00000090 db f0 92 eb 91 72 63 db 41 02 7d 52 58 c5 10 98 |.....rc.A.}RX...|
000000a0 b7 d4 e4 d9 39 f7 46 50 74 e7 d5 8b fe 0b b9 47 |....9.FPt......G|
000000b0 05 01 a2 51 |...Q|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 8 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 00 89 87 4f 0d 27 74 8d 74 4a 8e 52 43 |......O.'t.tJ.RC|
00000010 60 2e 40 7d 58 6c 91 c1 20 8e c5 28 54 26 b8 2c |`.@}Xl.. ..(T&.,|
00000020 21 ab 5c 31 9b fc a8 62 c9 62 34 d4 1a 9a 55 d4 |!.\1...b.b4...U.|
00000030 a9 93 6e 09 44 e1 8d c3 cd e1 3c 1f b6 e5 88 d0 |..n.D.....<.....|
00000040 e8 74 94 36 7d e6 8b 43 48 46 e5 e2 5d b6 36 f6 |.t.6}..CHF..].6.|
00000050 cd 65 1c c6 b8 2e 98 f2 93 0d b4 b1 d6 58 92 33 |.e...........X.3|
00000060 a9 ad 03 db bc 33 10 e6 2e 3c 1d c8 13 ec cd a1 |.....3...<......|
00000070 3d 53 18 3d 01 7c d6 5f c2 a0 c3 85 c6 2b 3c 86 |=S.=.|._.....+<.|
00000080 53 09 72 65 3c d7 33 27 2c 94 4d 22 f5 12 16 03 |S.re<.3',.M"....|
00000090 03 02 71 87 4f 0d 27 74 8d 74 4b ce 64 cb 8f 07 |..q.O.'t.tK.d...|
000000a0 66 6b 4d 0c 60 66 5c 92 af 5a 23 08 a5 ad 23 35 |fkM.`f\..Z#...#5|
000000b0 0e cb 1d ea d1 7e e4 2d 9e dd 50 79 53 9a 46 19 |.....~.-..PyS.F.|
000000c0 3a 2b f1 c6 c3 cc 81 a3 60 88 00 74 62 c6 ac fd |:+......`..tb...|
000000d0 e0 f0 d5 3f da 5b c4 8e ff dd 81 18 37 b6 19 ef |...?.[......7...|
000000e0 a4 95 51 b2 b0 78 3b c5 63 db 37 3e d7 f0 81 2b |..Q..x;.c.7>...+|
000000f0 82 32 72 21 c8 2c 0b 8a c4 d9 d8 74 ae 31 e4 97 |.2r!.,.....t.1..|
00000100 00 c0 f5 ea b9 07 1e 94 db 6e 71 54 98 22 4f 84 |.........nqT."O.|
00000110 7a 00 47 df 91 28 39 d4 8e 7f 3b 45 16 49 84 5f |z.G..(9...;E.I._|
00000120 57 4f 04 a3 84 7c 4d 67 35 78 1e 17 81 35 60 6f |WO...|Mg5x...5`o|
00000130 fe 23 4a 7d fb c6 39 40 c8 43 46 21 c8 95 10 db |.#J}..9@.CF!....|
00000140 23 90 e0 b4 bb 5b 6e ef 61 ab 0b cb 18 9f 2c d0 |#....[n.a.....,.|
00000150 b3 b8 15 11 d3 a2 88 9c 8d 85 5d 99 bd 65 ad 60 |..........]..e.`|
00000160 a8 58 bd b4 88 d2 d4 c8 08 62 e5 7f 79 53 36 46 |.X.......b..yS6F|
00000170 5f a1 8b 8c 0f 44 e8 2d 6f 37 e4 ff 00 65 46 09 |_....D.-o7...eF.|
00000180 42 ce 05 e8 e7 96 5e 9c 06 db a6 eb 78 0f fb 30 |B.....^.....x..0|
00000190 75 6b 08 65 72 f6 b4 d7 09 d8 3d 64 a3 23 de 27 |uk.er.....=d.#.'|
000001a0 a6 e7 84 60 28 52 8e 5f 48 f2 cc dd 6e 1b 33 e1 |...`(R._H...n.3.|
000001b0 e1 9e 71 af 2c e0 1c 44 8c df ca 5b 63 98 5e 70 |..q.,..D...[c.^p|
000001c0 d0 48 c7 eb 87 4a d3 7a 78 e7 02 2f 75 76 cc 70 |.H...J.zx../uv.p|
000001d0 19 9c 93 de e5 c0 af fc ad 9e 43 6c cb 09 c0 95 |..........Cl....|
000001e0 a5 8e dd e0 b8 61 8a c6 d5 89 95 cf 58 d7 93 9e |.....a......X...|
000001f0 4a 66 33 56 f2 d4 0a c6 23 d4 b7 e7 85 23 9b 57 |Jf3V....#....#.W|
00000200 68 20 22 5c d8 96 d2 dd 90 57 d5 e3 51 22 5d 44 |h "\.....W..Q"]D|
00000210 4f f3 9c 06 25 f9 b1 98 f5 d1 4d d1 79 c4 51 7f |O...%.....M.y.Q.|
00000220 8d 68 c0 44 28 12 86 68 d4 d6 16 11 5c 16 9f ea |.h.D(..h....\...|
00000230 82 e9 12 82 dc d5 c1 f7 bd 17 57 f7 bc ef 4a 38 |..........W...J8|
00000240 f5 4b 36 3a b2 a3 e7 fa ef b0 d2 02 1b 0d 27 bf |.K6:..........'.|
00000250 51 25 99 0d bc 7f 6c 53 71 81 30 e4 c5 1f 24 c8 |Q%....lSq.0...$.|
00000260 b7 19 c5 d9 e0 c0 a5 52 cc 27 83 da 43 38 a6 98 |.......R.'..C8..|
00000270 dc 1b ce ec 94 f1 a8 47 41 c6 8e 42 4b 6b 71 35 |.......GA..BKkq5|
00000280 b4 32 88 87 0f 31 1a 39 73 93 7e 61 c7 46 75 62 |.2...1.9s.~a.Fub|
00000290 ad db dc 9a b8 a1 33 c3 68 d3 0e 3e 26 f6 e5 51 |......3.h..>&..Q|
000002a0 d0 d1 35 c7 62 b5 22 dc e5 23 6a 08 64 12 56 ea |..5.b."..#j.d.V.|
000002b0 ae 21 aa 04 ac a0 70 a5 29 27 ff 67 96 63 71 82 |.!....p.)'.g.cq.|
000002c0 92 7e 87 cc b9 c6 6c f5 20 c2 d2 50 0a 53 78 0f |.~....l. ..P.Sx.|
000002d0 6c 84 c2 39 ca 73 75 f0 d6 13 70 2f d7 47 f5 b1 |l..9.su...p/.G..|
000002e0 6f a8 ac a8 75 34 a5 a2 69 1e b7 ae 59 90 f1 ed |o...u4..i...Y...|
000002f0 ce fa 13 66 99 9e d3 3c 7c ad ef 9f 16 b2 a1 9f |...f...<|.......|
00000300 42 32 d8 eb 16 03 03 00 e5 87 4f 0d 27 74 8d 74 |B2........O.'t.t|
00000310 4c 2c ae eb 0c 3d ac 73 0a 49 35 4d 87 66 91 f8 |L,...=.s.I5M.f..|
00000320 22 3c 47 b8 27 ee b9 7e 2d ac a7 de 12 aa 0e c7 |"<G.'..~-.......|
00000330 45 a8 da c4 c9 0e 9d 0e 15 75 94 ab 3f f7 52 46 |E........u..?.RF|
00000340 f8 e5 7f 97 c1 cf 69 eb 90 d3 31 f0 e2 c2 ea ff |......i...1.....|
00000350 f8 ed bb 43 61 d3 3c b8 bd 0a f4 81 98 5c 15 ef |...Ca.<......\..|
00000360 eb d9 08 86 9f 1a f2 16 e6 bc 05 51 7d 46 d2 79 |...........Q}F.y|
00000370 18 fe 1f 1a 9f 3a 6f 4d d7 2e b4 df cb f3 19 bf |.....:oM........|
00000380 69 70 d0 d5 51 8a a2 b2 ca 9c 44 a7 ef b1 ea 50 |ip..Q.....D....P|
00000390 45 43 65 b1 68 9c c4 89 cc 66 4a 76 f5 f5 9b 3b |ECe.h....fJv...;|
000003a0 82 54 fe a9 5e aa 53 9d e0 53 d8 e2 51 4b 55 67 |.T..^.S..S..QKUg|
000003b0 a4 15 36 f4 0d 99 fe 95 98 bf 8c 9e ad b3 84 f7 |..6.............|
000003c0 ff 06 92 22 7a a6 c0 8d a0 61 af 92 d2 32 b6 54 |..."z....a...2.T|
000003d0 d7 cc 29 59 76 7d 5b 5e d5 49 ac 91 bd d4 c7 da |..)Yv}[^.I......|
000003e0 89 86 82 ac 7a 71 a2 47 6c a0 39 e2 d9 0f 16 03 |....zq.Gl.9.....|
000003f0 03 00 46 87 4f 0d 27 74 8d 74 4d ab 8d b6 ef 87 |..F.O.'t.tM.....|
00000400 d3 f4 08 61 5d 78 e1 8b 8e 89 b8 d3 15 d3 a7 88 |...a]x..........|
00000410 63 9f 34 45 43 1f 26 cb d3 bd 8f 20 3f 69 53 8d |c.4EC.&.... ?iS.|
00000420 a3 69 12 9c 19 54 88 1e 34 68 a9 16 18 92 36 22 |.i...T..4h....6"|
00000430 c8 b7 48 d3 52 4e 82 21 ce |..H.RN.!.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 9 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 03 02 71 00 00 00 00 00 00 00 03 00 b6 c3 |....q...........|
00000010 7c 99 6e 21 9b e4 2b 53 e5 ce 3a f3 f5 89 66 c6 ||.n!..+S..:...f.|
00000020 9a 86 44 cc 73 40 5b 10 79 a4 ec a8 69 78 61 4b |..D.s@[.y...ixaK|
00000030 e4 83 ac 19 06 11 9c d3 14 12 6d ad 81 6f 0d 86 |..........m..o..|
00000040 54 7e 6d 1d 9b 9f 62 98 84 8d 3a 97 46 15 bc c3 |T~m...b...:.F...|
00000050 d6 fe d6 0d cb ea 41 d9 f5 ac 5b f0 6e 42 bf 2c |......A...[.nB.,|
00000060 b3 2e 63 3f 36 e4 d4 13 b9 bf 50 3a f2 6e 41 c8 |..c?6.....P:.nA.|
00000070 75 8d a1 34 42 1f a7 b2 51 e5 da 41 e0 54 52 24 |u..4B...Q..A.TR$|
00000080 f6 db 2f 3b e2 39 03 c8 f7 91 07 aa ad 65 cc a7 |../;.9.......e..|
00000090 bc c3 4e 2f c3 58 0c e4 e0 88 69 ef cb d3 e7 88 |..N/.X....i.....|
000000a0 a2 fe 9f 4a 49 d1 ad df 6d 14 10 f5 7d c3 bb 2d |...JI...m...}..-|
000000b0 fe fe b6 f0 0f a7 cc 57 34 f0 db ff e0 d8 33 b4 |.......W4.....3.|
000000c0 a5 26 49 b0 65 d5 5b fb 54 9d 86 51 73 bd ef 4c |.&I.e.[.T..Qs..L|
000000d0 41 b6 3d f3 3d 3f 2e 45 d5 9c 70 2b 76 ca 22 35 |A.=.=?.E..p+v."5|
000000e0 2a a7 33 33 7f 6c f3 3a 3e 77 c1 b5 b5 5a d8 4b |*.33.l.:>w...Z.K|
000000f0 76 7e 00 d4 eb a5 b8 5e 79 26 0b d7 2b 47 26 7d |v~.....^y&..+G&}|
00000100 f6 0d 7d fb d5 e9 1a 9f d0 08 61 c5 bc b8 6b 94 |..}.......a...k.|
00000110 4b bb 1b 06 3c f2 ce 2c f1 e9 d5 94 4e 24 7f ff |K...<..,....N$..|
00000120 85 d6 5d 20 d8 d4 09 06 4c 3c 44 26 43 b6 31 7c |..] ....L<D&C.1||
00000130 a3 1b bb d6 b6 47 58 61 52 85 f1 f1 10 ce ea ba |.....GXaR.......|
00000140 97 f3 85 ea 0e f6 65 40 fa 18 58 7c b4 70 c5 e6 |......e@..X|.p..|
00000150 16 05 b7 b1 3a 35 7c 72 67 f2 12 68 25 1f 5c 47 |....:5|rg..h%.\G|
00000160 57 15 ee bd 95 7f 6c 00 c9 36 7e 84 2a 3e 1b 7c |W.....l..6~.*>.||
00000170 bc e0 ee 59 06 f7 bb 44 dd d5 26 42 46 49 22 4c |...Y...D..&BFI"L|
00000180 2e 1f 82 fb eb 3d 3e 6a 9a fb b1 3e 6c d1 e1 71 |.....=>j...>l..q|
00000190 99 32 4e 49 34 56 e4 b9 ac dd ad fe 9b db 38 ff |.2NI4V........8.|
000001a0 96 e8 9c f2 b5 79 16 29 6b 1e 59 59 d7 e6 6d 5d |.....y.)k.YY..m]|
000001b0 bb 29 a5 1e cf 9a 9b a0 40 09 37 9f 4b 19 77 16 |.)......@.7.K.w.|
000001c0 2a 8f b6 c6 85 88 8a 3e 8a 0a 3d bd 08 92 9b d4 |*......>..=.....|
000001d0 80 b7 ac 9f da e2 82 67 df cf b8 8b 09 24 f6 01 |.......g.....$..|
000001e0 2d 6e 8b a3 b3 4b 1b c2 42 d6 ac 41 dc 1a da 1b |-n...K..B..A....|
000001f0 e7 8f 30 3f 26 e3 3c 16 34 56 ab f5 cc 57 68 54 |..0?&.<.4V...WhT|
00000200 83 72 fc f4 61 d2 dd 81 34 f1 ff a6 3e fd 14 9f |.r..a...4...>...|
00000210 52 71 07 96 73 27 fe c9 5b 62 f6 80 1b 59 f9 be |Rq..s'..[b...Y..|
00000220 5a 8a 63 39 2a 00 e4 e9 9b 92 65 74 08 c5 c8 71 |Z.c9*.....et...q|
00000230 74 0e bf 2a d7 4b 35 7d ca 33 25 cb 20 6f f4 91 |t..*.K5}.3%. o..|
00000240 d3 87 1b 40 47 1c 64 a3 0a 1e 0a c4 51 dc e5 0b |...@G.d.....Q...|
00000250 59 1b f6 7e 00 34 0c fb 01 5f b9 b2 df d0 7b 45 |Y..~.4..._....{E|
00000260 c7 59 2b 6c a9 1a d9 85 7d 2f 50 d4 91 e8 f3 ca |.Y+l....}/P.....|
00000270 51 4b c9 d9 d9 dc 16 03 03 00 5e 00 00 00 00 00 |QK........^.....|
00000280 00 00 04 6d cd 24 ed bc 9b 60 0f 3f 60 b8 5e bf |...m.$...`.?`.^.|
00000290 bd 5e 05 05 72 12 00 2e 4b d4 64 ae 07 44 7b 4d |.^..r...K.d..D{M|
000002a0 be c0 bc 54 7f 4a 04 1f dc 0e 68 5d 40 d3 03 4b |...T.J....h]@..K|
000002b0 c4 47 d9 06 a5 64 8a b2 27 0b 2e 00 87 4c 22 10 |.G...d..'....L".|
000002c0 c8 4f 4e 39 cc d5 59 25 c4 13 a0 4e 52 07 e4 0f |.ON9..Y%...NR...|
000002d0 63 d4 7a 94 1c 14 27 15 a3 16 03 03 00 a0 00 00 |c.z...'.........|
000002e0 00 00 00 00 00 05 1a f2 d4 c3 e6 b8 08 78 58 15 |.............xX.|
000002f0 50 7d 7b 8d 76 47 4e 25 3f 33 69 f0 64 af 1c 4e |P}{.vGN%?3i.d..N|
00000300 df a4 55 34 d7 a6 a7 93 0d d2 da e8 39 97 69 ce |..U4........9.i.|
00000310 91 9a b4 a9 4e 05 a3 e3 d3 1d 0b d6 1a 64 94 1f |....N........d..|
00000320 36 b6 b1 4d b7 a0 b1 85 cd 0b 94 86 c3 bc 60 c9 |6..M..........`.|
00000330 e5 ec bd 63 8b a4 df 4d 9a bc e3 0c be a7 2b d1 |...c...M......+.|
00000340 fb 7f 62 7f 6e 27 bf a4 cf 02 95 97 3a 39 90 6c |..b.n'......:9.l|
00000350 10 03 59 d7 66 d5 51 fa 6c 11 0d 8a f1 22 aa da |..Y.f.Q.l...."..|
00000360 0e d3 91 cc 5b 24 73 97 7e a2 1c 36 c4 3d 36 63 |....[$s.~..6.=6c|
00000370 84 77 f9 32 73 40 a1 e5 33 c6 d1 cb e9 3d 14 03 |.w.2s@..3....=..|
00000380 03 00 19 00 00 00 00 00 00 00 06 8b ac 4c 97 5c |.............L.\|
00000390 a4 6e 37 24 b4 86 55 61 dd a7 d3 30 16 03 03 00 |.n7$..Ua...0....|
000003a0 28 00 00 00 00 00 00 00 00 94 a0 5d 37 dc 51 d3 |(..........]7.Q.|
000003b0 1d 47 1c 65 f7 15 f9 2d fd ff f8 8f 94 7b 31 7e |.G.e...-.....{1~|
000003c0 4e 4d 52 7d 2a 44 86 aa 08 |NMR}*D...|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 10 (server to client)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 14 03 03 00 19 87 4f 0d 27 74 8d 74 4e 43 bf 50 |......O.'t.tNC.P|
00000010 ce e3 80 e6 0d d9 86 45 52 b3 62 ff ce 3c 16 03 |.......ER.b..<..|
00000020 03 00 28 98 56 2f b8 02 4d 74 4f d4 5e fc 4e b5 |..(.V/..MtO.^.N.|
00000030 48 f8 c5 53 9c 7a dc 4e ac 75 dc aa 19 c3 d9 ca |H..S.z.N.u......|
00000040 23 ae 9f 15 08 1f 2a a1 bb 0a 6f 17 03 03 00 21 |#.....*...o....!|
00000050 98 56 2f b8 02 4d 74 50 63 4b 9f ac bd f5 73 57 |.V/..MtPcK....sW|
00000060 6a 17 26 6b 24 3f 74 fc 58 a7 a1 b8 b2 87 86 8e |j.&k$?t.X.......|
00000070 b7 16 03 03 00 1c 98 56 2f b8 02 4d 74 51 41 48 |.......V/..MtQAH|
00000080 a4 ab fb 77 41 24 8b 87 fd 41 f9 39 52 60 66 75 |...wA$...A.9R`fu|
00000090 d9 ed |..|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 11 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 15 03 03 00 1a 00 00 00 00 00 00 00 01 68 2c 59 |.............h,Y|
00000010 c3 45 29 6b 7e 0d 45 5e 4f 80 33 07 5d 8b 7e 15 |.E)k~.E^O.3.].~.|
00000020 03 03 00 1a 00 00 00 00 00 00 00 02 78 77 81 c1 |............xw..|
00000030 da 3d 67 44 50 ac b5 2b 1e d6 c0 59 1f 36 |.=gDP..+...Y.6|
Reference in New Issue Copy Permalink