kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
6918d87d90
th5/testdata/Server-TLSv12-ALPN

99 lines
7.3 KiB
Plaintext
Raw Normal View History

crypto/tls: add ALPN support. Fixes #6736. LGTM=mikioh.mikioh R=bradfitz, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/108710046
2014-08-05 19:36:20 +01:00
>>> Flow 1 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 01 00 bf 01 00 00 bb 03 03 88 3e 03 e9 31 |............>..1|
00000010 b2 d6 0d 3f f0 26 65 6f db 03 86 f1 47 d0 0c b3 |...?.&eo....G...|
00000020 54 92 56 0d 24 e8 01 11 ce 83 44 00 00 38 c0 2c |T.V.$.....D..8.,|
00000030 c0 30 00 9f cc a9 cc a8 cc aa c0 2b c0 2f 00 9e |.0.........+./..|
00000040 c0 24 c0 28 00 6b c0 23 c0 27 00 67 c0 0a c0 14 |.$.(.k.#.'.g....|
00000050 00 39 c0 09 c0 13 00 33 00 9d 00 9c 00 3d 00 3c |.9.....3.....=.<|
00000060 00 35 00 2f 00 ff 01 00 00 5a 00 0b 00 04 03 00 |.5./.....Z......|
00000070 01 02 00 0a 00 0a 00 08 00 1d 00 17 00 19 00 18 |................|
00000080 00 23 00 00 00 0d 00 20 00 1e 06 01 06 02 06 03 |.#..... ........|
00000090 05 01 05 02 05 03 04 01 04 02 04 03 03 01 03 02 |................|
000000a0 03 03 02 01 02 02 02 03 00 10 00 10 00 0e 06 70 |...............p|
000000b0 72 6f 74 6f 32 06 70 72 6f 74 6f 31 00 16 00 00 |roto2.proto1....|
000000c0 00 17 00 00 |....|
crypto/tls: add ALPN support. Fixes #6736. LGTM=mikioh.mikioh R=bradfitz, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/108710046
2014-08-05 19:36:20 +01:00
>>> Flow 2 (server to client)
00000000 16 03 03 00 42 02 00 00 3e 03 03 00 00 00 00 00 |....B...>.......|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
crypto/tls: add support for AES_256_GCM_SHA384 cipher suites specified in RFC5289 Generalizes PRF calculation for TLS 1.2 to support arbitrary hashes (SHA-384 instead of SHA-256). Testdata were all updated to correspond with the new cipher suites in the handshake. Change-Id: I3d9fc48c19d1043899e38255a53c80dc952ee08f Reviewed-on: https://go-review.googlesource.com/3265 Reviewed-by: Adam Langley <agl@golang.org>
2015-02-04 00:15:18 +00:00
00000020 00 00 00 00 00 00 00 00 00 00 00 00 c0 30 00 00 |.............0..|
crypto/tls: add ALPN support. Fixes #6736. LGTM=mikioh.mikioh R=bradfitz, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/108710046
2014-08-05 19:36:20 +01:00
00000030 16 00 23 00 00 ff 01 00 01 00 00 10 00 09 00 07 |..#.............|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000040 06 70 72 6f 74 6f 31 16 03 03 02 59 0b 00 02 55 |.proto1....Y...U|
00000050 00 02 52 00 02 4f 30 82 02 4b 30 82 01 b4 a0 03 |..R..O0..K0.....|
00000060 02 01 02 02 09 00 e8 f0 9d 3f e2 5b ea a6 30 0d |.........?.[..0.|
00000070 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 1f 31 |..*.H........0.1|
00000080 0b 30 09 06 03 55 04 0a 13 02 47 6f 31 10 30 0e |.0...U....Go1.0.|
00000090 06 03 55 04 03 13 07 47 6f 20 52 6f 6f 74 30 1e |..U....Go Root0.|
000000a0 17 0d 31 36 30 31 30 31 30 30 30 30 30 30 5a 17 |..160101000000Z.|
000000b0 0d 32 35 30 31 30 31 30 30 30 30 30 30 5a 30 1a |.250101000000Z0.|
000000c0 31 0b 30 09 06 03 55 04 0a 13 02 47 6f 31 0b 30 |1.0...U....Go1.0|
000000d0 09 06 03 55 04 03 13 02 47 6f 30 81 9f 30 0d 06 |...U....Go0..0..|
000000e0 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 |.*.H............|
000000f0 30 81 89 02 81 81 00 db 46 7d 93 2e 12 27 06 48 |0.......F}...'.H|
00000100 bc 06 28 21 ab 7e c4 b6 a2 5d fe 1e 52 45 88 7a |..(!.~...]..RE.z|
00000110 36 47 a5 08 0d 92 42 5b c2 81 c0 be 97 79 98 40 |6G....B[.....y.@|
00000120 fb 4f 6d 14 fd 2b 13 8b c2 a5 2e 67 d8 d4 09 9e |.Om..+.....g....|
00000130 d6 22 38 b7 4a 0b 74 73 2b c2 34 f1 d1 93 e5 96 |."8.J.ts+.4.....|
00000140 d9 74 7b f3 58 9f 6c 61 3c c0 b0 41 d4 d9 2b 2b |.t{.X.la<..A..++|
00000150 24 23 77 5b 1c 3b bd 75 5d ce 20 54 cf a1 63 87 |$#w[.;.u]. T..c.|
00000160 1d 1e 24 c4 f3 1d 1a 50 8b aa b6 14 43 ed 97 a7 |..$....P....C...|
00000170 75 62 f4 14 c8 52 d7 02 03 01 00 01 a3 81 93 30 |ub...R.........0|
00000180 81 90 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 |..0...U.........|
00000190 05 a0 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b |..0...U.%..0...+|
000001a0 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 |.........+......|
000001b0 02 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 |.0...U.......0.0|
000001c0 19 06 03 55 1d 0e 04 12 04 10 9f 91 16 1f 43 43 |...U..........CC|
000001d0 3e 49 a6 de 6d b6 80 d7 9f 60 30 1b 06 03 55 1d |>I..m....`0...U.|
000001e0 23 04 14 30 12 80 10 48 13 49 4d 13 7e 16 31 bb |#..0...H.IM.~.1.|
000001f0 a3 01 d5 ac ab 6e 7b 30 19 06 03 55 1d 11 04 12 |.....n{0...U....|
00000200 30 10 82 0e 65 78 61 6d 70 6c 65 2e 67 6f 6c 61 |0...example.gola|
00000210 6e 67 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 |ng0...*.H.......|
00000220 00 03 81 81 00 9d 30 cc 40 2b 5b 50 a0 61 cb ba |......0.@+[P.a..|
00000230 e5 53 58 e1 ed 83 28 a9 58 1a a9 38 a4 95 a1 ac |.SX...(.X..8....|
00000240 31 5a 1a 84 66 3d 43 d3 2d d9 0b f2 97 df d3 20 |1Z..f=C.-...... |
00000250 64 38 92 24 3a 00 bc cf 9c 7d b7 40 20 01 5f aa |d8.$:....}.@ ._.|
00000260 d3 16 61 09 a2 76 fd 13 c3 cc e1 0c 5c ee b1 87 |..a..v......\...|
00000270 82 f1 6c 04 ed 73 bb b3 43 77 8d 0c 1c f1 0f a1 |..l..s..Cw......|
00000280 d8 40 83 61 c9 4c 72 2b 9d ae db 46 06 06 4d f4 |.@.a.Lr+...F..M.|
00000290 c1 b3 3e c0 d1 bd 42 d4 db fe 3d 13 60 84 5c 21 |..>...B...=.`.\!|
000002a0 d3 3b e9 fa e7 16 03 03 00 cd 0c 00 00 c9 03 00 |.;..............|
000002b0 17 41 04 1e 18 37 ef 0d 19 51 88 35 75 71 b5 e5 |.A...7...Q.5uq..|
000002c0 54 5b 12 2e 8f 09 67 fd a7 24 20 3e b2 56 1c ce |T[....g..$ >.V..|
000002d0 97 28 5e f8 2b 2d 4f 9e f1 07 9f 6c 4b 5b 83 56 |.(^.+-O....lK[.V|
000002e0 e2 32 42 e9 58 b6 d7 49 a6 b5 68 1a 41 03 56 6b |.2B.X..I..h.A.Vk|
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
000002f0 dc 5a 89 05 01 00 80 5b dc 03 ef f0 ad 7c 4d 90 |.Z.....[.....|M.|
00000300 5c 90 1d 46 65 cd 9a 96 21 a7 9f 91 ae 71 45 72 |\..Fe...!....qEr|
00000310 38 8d c7 79 5d 29 90 47 50 e5 4c 7c 40 e5 1b 64 |8..y]).GP.L|@..d|
00000320 da b1 b6 7b f1 d5 59 12 2d 5f f2 17 86 8d 25 cd |...{..Y.-_....%.|
00000330 85 37 07 32 e5 5e 19 a8 81 0c c7 02 1c 33 93 72 |.7.2.^.......3.r|
00000340 dc 9b b1 60 85 12 4c 6c aa 6a 43 66 08 23 d1 35 |...`..Ll.jCf.#.5|
00000350 f1 5d a4 db fa 5d f4 dd 23 c8 c8 43 76 48 47 aa |.]...]..#..CvHG.|
00000360 e1 19 f6 f1 28 86 5d 6b f4 06 9f 1b 09 6d 00 8f |....(.]k.....m..|
00000370 61 c7 85 d9 06 8c a1 16 03 03 00 04 0e 00 00 00 |a...............|
crypto/tls: add ALPN support. Fixes #6736. LGTM=mikioh.mikioh R=bradfitz, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/108710046
2014-08-05 19:36:20 +01:00
>>> Flow 3 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 00 46 10 00 00 42 41 04 f3 2d 56 31 b2 |....F...BA..-V1.|
00000010 42 82 38 35 3b f0 53 2b 12 4b bb 08 88 32 36 8f |B.85;.S+.K...26.|
00000020 2f 94 a0 72 5e 0b b8 0d 95 49 b2 e7 38 89 bb b4 |/..r^....I..8...|
00000030 04 2b a0 0d 1f eb 7d eb 90 04 fd 1e c0 8b 70 18 |.+....}.......p.|
00000040 be c9 a0 82 08 6b 81 04 39 b4 1b 14 03 03 00 01 |.....k..9.......|
00000050 01 16 03 03 00 28 3d 97 3c d5 1c b8 3f 63 3e ac |.....(=.<...?c>.|
00000060 74 08 ce ce b5 0d 68 a6 45 73 c8 0d 84 c5 76 35 |t.....h.Es....v5|
00000070 c6 f0 47 24 3d c5 2a c7 e8 85 26 6f 5f 14 |..G$=.*...&o_.|
crypto/tls: add ALPN support. Fixes #6736. LGTM=mikioh.mikioh R=bradfitz, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/108710046
2014-08-05 19:36:20 +01:00
>>> Flow 4 (server to client)
crypto/tls: add support for session ticket key rotation This change adds a new method to tls.Config, SetSessionTicketKeys, that changes the key used to encrypt session tickets while the server is running. Additional keys may be provided that will be used to maintain continuity while rotating keys. If a ticket encrypted with an old key is provided by the client, the server will resume the session and provide the client with a ticket encrypted using the new key. Fixes #9994 Change-Id: Idbc16b10ff39616109a51ed39a6fa208faad5b4e Reviewed-on: https://go-review.googlesource.com/9072 Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> Reviewed-by: Adam Langley <agl@golang.org>
2015-04-18 02:32:11 +01:00
00000000 16 03 03 00 82 04 00 00 7e 00 00 00 00 00 78 50 |........~.....xP|
00000010 46 ad c1 db a8 38 86 7b 2b bb fd d0 c3 42 3e 00 |F....8.{+....B>.|
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 94 |................|
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000030 6f ec 80 83 61 74 ca b7 d0 0f 86 1e bd d2 13 2a |o...at.........*|
00000040 fb 4c c8 c3 ba 1d ee ca 47 89 1e 20 22 60 bf 71 |.L......G.. "`.q|
00000050 e2 65 0f f1 05 3d 96 8f 29 51 bd b4 d0 d8 d4 50 |.e...=..)Q.....P|
00000060 42 3b c1 dd 60 33 94 7c a7 da 69 63 58 0e 76 ee |B;..`3.|..icX.v.|
00000070 a8 0d 04 39 05 d2 ab f7 64 f1 51 29 47 2b a0 fb |...9....d.Q)G+..|
00000080 ca e7 8b 4a 2b ae ee 14 03 03 00 01 01 16 03 03 |...J+...........|
00000090 00 28 00 00 00 00 00 00 00 00 d9 44 b3 c5 8c 0d |.(.........D....|
000000a0 04 4b 07 ea e7 f6 5a 1d 43 cf 24 91 6e 49 36 f8 |.K....Z.C.$.nI6.|
000000b0 f1 8b c2 40 85 46 2d e2 ab 64 17 03 03 00 25 00 |...@.F-..d....%.|
000000c0 00 00 00 00 00 00 01 56 17 f0 39 6a 82 00 08 f2 |.......V..9j....|
000000d0 d7 16 3a 24 04 63 59 c0 4e 5c 81 31 2a d4 c5 06 |..:$.cY.N\.1*...|
000000e0 c9 0a 7f 68 15 03 03 00 1a 00 00 00 00 00 00 00 |...h............|
000000f0 02 b6 1b ca a1 7d 0e b8 1a 7e e8 6d a2 f1 9a 2e |.....}...~.m....|
00000100 de f4 df |...|
Reference in New Issue Copy Permalink