kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
7ef5c9eac8
th5/testdata/Client-TLSv12-RenegotiateTwiceRejected

254 lines
19 KiB
Plaintext
Raw Normal View History

crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 1 (client to server)
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000000 16 03 01 00 8b 01 00 00 87 03 03 00 00 00 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
crypto/tls: support AES-128-CBC cipher suites with SHA-256. These were new with TLS 1.2 and, reportedly, some servers require it. Since it's easy, this change adds suport for three flavours of AES-128-CBC with SHA-256 MACs. Other testdata/ files have to be updated because this changes the list of cipher suites offered by default by the client. Fixes #15487. Change-Id: I1b14330c31eeda20185409a37072343552c3464f Reviewed-on: https://go-review.googlesource.com/27315 Run-TryBot: Adam Langley <agl@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> TryBot-Result: Gobot Gobot <gobot@golang.org>
2016-08-18 00:45:47 +01:00
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 28 c0 2f |.............(./|
00000030 c0 2b c0 30 c0 2c c0 27 c0 13 c0 23 c0 09 c0 14 |.+.0.,.'...#....|
00000040 c0 0a 00 9c 00 9d 00 3c 00 2f 00 35 c0 12 00 0a |.......<./.5....|
00000050 00 05 c0 11 c0 07 01 00 00 36 00 05 00 05 01 00 |.........6......|
00000060 00 00 00 00 0a 00 08 00 06 00 17 00 18 00 19 00 |................|
00000070 0b 00 02 01 00 00 0d 00 0e 00 0c 04 01 04 03 05 |................|
00000080 01 05 03 02 01 02 03 ff 01 00 01 00 00 12 00 00 |................|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 2 (server to client)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 00 59 02 00 00 55 03 03 8e 2b 17 9a cb |....Y...U...+...|
00000010 44 bb cc 82 0f 8f 7e 90 52 0b ee 44 99 25 2d c8 |D.....~.R..D.%-.|
00000020 47 ae b6 15 36 69 0d f5 b8 6e 38 20 f6 94 68 6b |G...6i...n8 ..hk|
00000030 1a 51 d8 1a bb 24 68 7e 05 bf e6 bd 20 82 f0 19 |.Q...$h~.... ...|
00000040 f3 e7 7a 06 23 8d a1 5d 7a e3 d8 02 c0 2f 00 00 |..z.#..]z..../..|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
00000050 0d ff 01 00 01 00 00 0b 00 04 03 00 01 02 16 03 |................|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000060 03 02 59 0b 00 02 55 00 02 52 00 02 4f 30 82 02 |..Y...U..R..O0..|
00000070 4b 30 82 01 b4 a0 03 02 01 02 02 09 00 e8 f0 9d |K0..............|
00000080 3f e2 5b ea a6 30 0d 06 09 2a 86 48 86 f7 0d 01 |?.[..0...*.H....|
00000090 01 0b 05 00 30 1f 31 0b 30 09 06 03 55 04 0a 13 |....0.1.0...U...|
000000a0 02 47 6f 31 10 30 0e 06 03 55 04 03 13 07 47 6f |.Go1.0...U....Go|
000000b0 20 52 6f 6f 74 30 1e 17 0d 31 36 30 31 30 31 30 | Root0...1601010|
000000c0 30 30 30 30 30 5a 17 0d 32 35 30 31 30 31 30 30 |00000Z..25010100|
000000d0 30 30 30 30 5a 30 1a 31 0b 30 09 06 03 55 04 0a |0000Z0.1.0...U..|
000000e0 13 02 47 6f 31 0b 30 09 06 03 55 04 03 13 02 47 |..Go1.0...U....G|
000000f0 6f 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 |o0..0...*.H.....|
00000100 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 db 46 |.......0.......F|
00000110 7d 93 2e 12 27 06 48 bc 06 28 21 ab 7e c4 b6 a2 |}...'.H..(!.~...|
00000120 5d fe 1e 52 45 88 7a 36 47 a5 08 0d 92 42 5b c2 |]..RE.z6G....B[.|
00000130 81 c0 be 97 79 98 40 fb 4f 6d 14 fd 2b 13 8b c2 |....y.@.Om..+...|
00000140 a5 2e 67 d8 d4 09 9e d6 22 38 b7 4a 0b 74 73 2b |..g....."8.J.ts+|
00000150 c2 34 f1 d1 93 e5 96 d9 74 7b f3 58 9f 6c 61 3c |.4......t{.X.la<|
00000160 c0 b0 41 d4 d9 2b 2b 24 23 77 5b 1c 3b bd 75 5d |..A..++$#w[.;.u]|
00000170 ce 20 54 cf a1 63 87 1d 1e 24 c4 f3 1d 1a 50 8b |. T..c...$....P.|
00000180 aa b6 14 43 ed 97 a7 75 62 f4 14 c8 52 d7 02 03 |...C...ub...R...|
00000190 01 00 01 a3 81 93 30 81 90 30 0e 06 03 55 1d 0f |......0..0...U..|
000001a0 01 01 ff 04 04 03 02 05 a0 30 1d 06 03 55 1d 25 |.........0...U.%|
000001b0 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 |..0...+.........|
000001c0 2b 06 01 05 05 07 03 02 30 0c 06 03 55 1d 13 01 |+.......0...U...|
000001d0 01 ff 04 02 30 00 30 19 06 03 55 1d 0e 04 12 04 |....0.0...U.....|
000001e0 10 9f 91 16 1f 43 43 3e 49 a6 de 6d b6 80 d7 9f |.....CC>I..m....|
000001f0 60 30 1b 06 03 55 1d 23 04 14 30 12 80 10 48 13 |`0...U.#..0...H.|
00000200 49 4d 13 7e 16 31 bb a3 01 d5 ac ab 6e 7b 30 19 |IM.~.1......n{0.|
00000210 06 03 55 1d 11 04 12 30 10 82 0e 65 78 61 6d 70 |..U....0...examp|
00000220 6c 65 2e 67 6f 6c 61 6e 67 30 0d 06 09 2a 86 48 |le.golang0...*.H|
00000230 86 f7 0d 01 01 0b 05 00 03 81 81 00 9d 30 cc 40 |.............0.@|
00000240 2b 5b 50 a0 61 cb ba e5 53 58 e1 ed 83 28 a9 58 |+[P.a...SX...(.X|
00000250 1a a9 38 a4 95 a1 ac 31 5a 1a 84 66 3d 43 d3 2d |..8....1Z..f=C.-|
00000260 d9 0b f2 97 df d3 20 64 38 92 24 3a 00 bc cf 9c |...... d8.$:....|
00000270 7d b7 40 20 01 5f aa d3 16 61 09 a2 76 fd 13 c3 |}.@ ._...a..v...|
00000280 cc e1 0c 5c ee b1 87 82 f1 6c 04 ed 73 bb b3 43 |...\.....l..s..C|
00000290 77 8d 0c 1c f1 0f a1 d8 40 83 61 c9 4c 72 2b 9d |w.......@.a.Lr+.|
000002a0 ae db 46 06 06 4d f4 c1 b3 3e c0 d1 bd 42 d4 db |..F..M...>...B..|
000002b0 fe 3d 13 60 84 5c 21 d3 3b e9 fa e7 16 03 03 00 |.=.`.\!.;.......|
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
000002c0 cd 0c 00 00 c9 03 00 17 41 04 76 45 d0 d8 e2 07 |........A.vE....|
000002d0 b2 f0 fd af 1c 34 15 0e 3f 3a d2 f4 6d 40 7f 26 |.....4..?:..m@.&|
000002e0 3a ea 12 0e f0 f0 c5 66 7d 14 56 5d 55 07 08 dd |:......f}.V]U...|
000002f0 a2 5f ea 93 1c ad 1f 1d 1c 28 8e 8d 7c 5f 4b 6d |._.......(..|_Km|
00000300 66 d1 58 ae f1 da 43 ce 0e a7 04 01 00 80 a9 bf |f.X...C.........|
00000310 00 3b cd b4 58 11 0f a5 b0 b5 2d ac 3c 85 a5 3a |.;..X.....-.<..:|
00000320 73 d6 9a 94 e5 fd 67 47 db b6 75 7e 04 5d 47 75 |s.....gG..u~.]Gu|
00000330 d7 43 03 bd 51 3f ee 1e 54 b5 0e fd 3b 60 81 ef |.C..Q?..T...;`..|
00000340 81 26 28 2b 0d b4 74 24 3f 55 fb 32 03 b5 60 57 |.&(+..t$?U.2..`W|
00000350 9c 69 5a 4a ec 7c 81 f1 e8 2a 81 f6 0b 22 82 6b |.iZJ.|...*...".k|
00000360 dc e7 fb 52 6d 33 cb 97 00 c6 f8 df ed f2 6f 58 |...Rm3........oX|
00000370 63 1e a9 cd 6a 5e 9b fe 69 c5 4e aa 03 ec 7e ba |c...j^..i.N...~.|
00000380 38 30 63 77 98 b0 25 66 0e 87 dd 2d 7f 74 16 03 |80cw..%f...-.t..|
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-08-17 23:55:15 +01:00
00000390 03 00 04 0e 00 00 00 |.......|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 3 (client to server)
00000000 16 03 03 00 46 10 00 00 42 41 04 1e 18 37 ef 0d |....F...BA...7..|
00000010 19 51 88 35 75 71 b5 e5 54 5b 12 2e 8f 09 67 fd |.Q.5uq..T[....g.|
00000020 a7 24 20 3e b2 56 1c ce 97 28 5e f8 2b 2d 4f 9e |.$ >.V...(^.+-O.|
00000030 f1 07 9f 6c 4b 5b 83 56 e2 32 42 e9 58 b6 d7 49 |...lK[.V.2B.X..I|
00000040 a6 b5 68 1a 41 03 56 6b dc 5a 89 14 03 03 00 01 |..h.A.Vk.Z......|
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000050 01 16 03 03 00 28 00 00 00 00 00 00 00 00 2f 6c |.....(......../l|
00000060 3b 07 9f 28 8a a1 6b 6d 07 43 87 e3 08 25 cb f1 |;..(..km.C...%..|
00000070 82 54 49 19 67 c9 33 15 34 7a 9f 3e 38 ea |.TI.g.3.4z.>8.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 4 (server to client)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 14 03 03 00 01 01 16 03 03 00 28 29 f3 ac 3d c8 |..........()..=.|
00000010 6d 0c bc be 29 f6 ca 1c ae fa 41 2a dd b5 fb a2 |m...).....A*....|
00000020 ec 8a dd a3 cc 6e bc b2 b2 4c f7 22 06 4c 7b 1f |.....n...L.".L{.|
00000030 77 77 40 |ww@|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 5 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 17 03 03 00 1e 00 00 00 00 00 00 00 01 fe c0 da |................|
00000010 da fd 7f 10 6a 29 cd 7a 3b 79 fe e0 0f 37 19 ec |....j).z;y...7..|
00000020 d2 15 c7 |...|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 6 (server to client)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 00 1c 29 f3 ac 3d c8 6d 0c bd d8 1c 55 |.....)..=.m....U|
00000010 34 2f 9f a7 8c 92 9e 0b 57 46 08 6a 11 54 82 94 |4/......WF.j.T..|
00000020 e3 |.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 7 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 00 af 00 00 00 00 00 00 00 02 36 0a ba |.............6..|
00000010 2d db 68 c5 94 97 9d 3f 41 71 8d 92 37 4b 12 ca |-.h....?Aq..7K..|
00000020 b9 c0 ab 5e 0e 98 f5 fc 28 47 32 c3 98 ca 04 30 |...^....(G2....0|
00000030 24 14 1f b1 69 86 b0 de b6 f2 15 f9 e0 eb 5a 37 |$...i.........Z7|
00000040 69 94 26 8b 8e 19 cb 1a ba 7f fb a8 b9 61 25 f2 |i.&..........a%.|
00000050 68 8b 97 af fd 3b 59 04 50 3f 27 97 7b df 61 bd |h....;Y.P?'.{.a.|
00000060 cb e7 6d 6a d8 c0 1d 8d 8b fc 68 49 a7 13 bf 5c |..mj......hI...\|
00000070 fe 80 70 13 09 0b 35 4a 9b 3c 32 95 0f a2 31 c3 |..p...5J.<2...1.|
00000080 b5 4f 19 82 30 a1 65 fc 5b 48 16 49 10 2b 2f c5 |.O..0.e.[H.I.+/.|
00000090 f4 eb 02 87 a8 f7 e4 94 34 72 c9 a6 e6 c4 de 7e |........4r.....~|
000000a0 48 50 57 33 9e 30 eb fa 92 e7 9b fe 33 52 2b e5 |HPW3.0......3R+.|
000000b0 b3 e4 47 b3 |..G.|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 8 (server to client)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 00 89 29 f3 ac 3d c8 6d 0c be 61 86 67 |.....)..=.m..a.g|
00000010 ed 4a a6 8b 53 5c 8c e0 3e b8 e4 91 8b 45 df 9d |.J..S\..>....E..|
00000020 1a 08 eb 71 3b 7c d8 43 9a e3 83 36 d6 5d 9e 4b |...q;|.C...6.].K|
00000030 e7 4b b3 a2 f1 98 43 f4 e2 f3 39 cf 2c cb 48 49 |.K....C...9.,.HI|
00000040 97 33 83 7b 27 b8 16 07 87 8e 6d 5f c8 d8 75 64 |.3.{'.....m_..ud|
00000050 91 51 3c bf 28 09 c0 87 12 2e e4 7a cc 53 a4 bf |.Q<.(......z.S..|
00000060 dc 0c d5 72 26 51 13 d2 9f a5 1b 1d a3 da 91 2b |...r&Q.........+|
00000070 e7 dd 5b a4 a7 18 70 2a 4b 87 25 05 e6 e1 14 ec |..[...p*K.%.....|
00000080 63 25 d6 f4 31 8e d1 d1 0d 53 1c 80 ea 11 16 03 |c%..1....S......|
00000090 03 02 71 29 f3 ac 3d c8 6d 0c bf 37 88 e8 06 f8 |..q)..=.m..7....|
000000a0 ed ce 83 7c 1c 40 a9 7a 6d 0b 99 76 03 89 f6 61 |...|.@.zm..v...a|
000000b0 a6 18 53 2f ac 03 ba 49 44 bf 76 0d 7e e4 d5 04 |..S/...ID.v.~...|
000000c0 83 a2 d6 20 23 f3 78 43 b4 d6 85 c0 12 59 89 4d |... #.xC.....Y.M|
000000d0 c4 bf b4 e8 99 21 6c 73 82 67 59 1d 86 a8 d5 df |.....!ls.gY.....|
000000e0 5f 74 73 3a ef 20 ed 55 c7 0f 20 62 ee 5c 6f 63 |_ts:. .U.. b.\oc|
000000f0 c6 bc a2 60 3a 5e 27 e9 4c 04 c7 ce 6d 36 3b 7e |...`:^'.L...m6;~|
00000100 81 ee bc e3 53 bd ab 52 78 aa 8c 37 f0 6b 9c 1c |....S..Rx..7.k..|
00000110 52 63 68 3d 14 0c e2 89 6c 6b 95 4b 97 b8 76 06 |Rch=....lk.K..v.|
00000120 4b 05 08 92 dc d8 26 56 ae 47 9b 9e 1b e4 16 66 |K.....&V.G.....f|
00000130 53 63 0e 68 0d 33 f1 68 4d fc fb c5 1e d9 20 2c |Sc.h.3.hM..... ,|
00000140 e5 61 27 be aa c9 a0 22 23 c8 ec bd 44 51 20 40 |.a'...."#...DQ @|
00000150 65 0a 2f 91 47 30 ac 40 91 a9 6e 3a 7c 53 80 2a |e./.G0.@..n:|S.*|
00000160 70 f9 fa 93 ad d3 c4 ce 59 89 e7 85 fa cd ee 93 |p.......Y.......|
00000170 8b f6 c2 96 3b 37 d5 ed ae 2c 65 ea e5 53 72 3f |....;7...,e..Sr?|
00000180 87 5e 8e 08 7b 82 38 fd 95 2e 11 8a 78 b8 f4 07 |.^..{.8.....x...|
00000190 2c 3a c7 d3 4f 9c 8f 43 7c fa 81 eb f0 c6 16 82 |,:..O..C|.......|
000001a0 a2 73 d3 76 05 6b 6e 52 49 fc d9 e1 c1 2f 06 d7 |.s.v.knRI..../..|
000001b0 b6 3c cd d8 35 9c 0b 2b 3c ec 38 21 47 22 1d 3d |.<..5..+<.8!G".=|
000001c0 b8 dc 62 86 b5 c4 ab d4 de 15 fe 80 1e 6b d6 56 |..b..........k.V|
000001d0 cd 62 dc f2 31 f8 a0 b1 b5 93 35 98 e2 5d 97 9b |.b..1.....5..]..|
000001e0 f2 ce af bf 3c 38 56 28 17 c9 ae 17 e5 aa e3 8b |....<8V(........|
000001f0 7b 3b 5d 67 95 89 94 7e 57 81 8f 2e 33 5c 42 24 |{;]g...~W...3\B$|
00000200 e4 ea 55 8c eb 23 1a b9 19 72 65 9a e5 30 e5 f9 |..U..#...re..0..|
00000210 78 31 6e b9 43 45 a3 fd c6 d8 ad dc 96 70 06 1c |x1n.CE.......p..|
00000220 e5 7e 5f c1 f5 00 f7 e7 f2 6a b7 8c 9b bd 77 6a |.~_......j....wj|
00000230 1f da 78 4a a9 e1 f1 2e 78 ed 07 57 7d a1 84 67 |..xJ....x..W}..g|
00000240 27 13 d1 c4 1e 24 0d 0a 85 ea 86 10 fd 21 08 40 |'....$.......!.@|
00000250 e6 38 66 44 8c 77 07 d7 60 70 9a e6 6d 94 c8 6e |.8fD.w..`p..m..n|
00000260 fb 2f ff 30 27 21 b8 f7 16 24 bd 80 b9 56 ce 24 |./.0'!...$...V.$|
00000270 67 74 b6 c7 cd de 96 3b d9 10 21 12 c3 83 9e f8 |gt.....;..!.....|
00000280 d7 fc 6f a8 91 4b f4 ea 47 ff 72 31 56 2f ee 25 |..o..K..G.r1V/.%|
00000290 34 69 21 17 b2 7f 6e 5e 10 8c 47 0b ca 55 31 3e |4i!...n^..G..U1>|
000002a0 ba 22 53 ed 23 85 17 cf 35 6f a9 37 3e 69 7b b7 |."S.#...5o.7>i{.|
000002b0 f5 a7 61 93 ee c0 f8 ac 62 37 ba 8d ab cf 66 f6 |..a.....b7....f.|
000002c0 5a fb c6 dd 20 09 89 bb a8 58 1a 69 4e 91 d3 36 |Z... ....X.iN..6|
000002d0 23 0d ed f2 32 59 8d 9e 77 76 36 ad 6d bf d9 68 |#...2Y..wv6.m..h|
000002e0 fe 4b ad 67 9f 8d 13 d9 2e b8 be 1b b2 4f e9 13 |.K.g.........O..|
000002f0 be 38 63 e1 d8 14 35 b9 ce d0 65 d6 9c f1 c1 d8 |.8c...5...e.....|
00000300 a4 d7 23 84 16 03 03 00 e5 29 f3 ac 3d c8 6d 0c |..#......)..=.m.|
00000310 c0 05 31 37 9f 4e 42 90 51 56 63 6f 86 e9 6d 67 |..17.NB.QVco..mg|
00000320 0e 7e 8a d6 a9 7a 62 02 94 9b 6b 48 fc a9 bc 94 |.~...zb...kH....|
00000330 a8 d5 9b 94 5e 3d 50 a0 df f8 23 c0 a3 1f a0 de |....^=P...#.....|
00000340 6b c9 75 fa 7f 8e 4a 85 04 d8 2f 97 37 b9 e3 84 |k.u...J.../.7...|
00000350 25 47 2f 66 d2 68 00 46 12 95 83 d4 9b 4d 1d d2 |%G/f.h.F.....M..|
00000360 53 50 b8 97 f0 46 64 86 58 be a0 ef 00 c7 50 a3 |SP...Fd.X.....P.|
00000370 84 9f 3f 41 fe 94 cc 9f c8 e1 c3 23 a5 02 2b 0e |..?A.......#..+.|
00000380 80 d6 f5 30 ed 60 ba 46 fe 3a 08 0d 0e 76 db a5 |...0.`.F.:...v..|
00000390 ed 18 85 8e a3 81 1c 38 8b a1 3f 1c 72 ea 61 03 |.......8..?.r.a.|
000003a0 65 68 db 25 8e 8d 93 6a a5 ce c2 94 eb b1 49 6e |eh.%...j......In|
000003b0 f5 e7 99 fa 5f 08 ee 0c f8 a4 1d e2 3c e2 be 82 |...._.......<...|
000003c0 50 9e 60 22 fc 0b 58 1e 5a b8 b2 1f 1f be 05 83 |P.`"..X.Z.......|
000003d0 1f 94 e1 01 29 c1 e8 2a 4b 17 e4 8f 0f 01 e3 3d |....)..*K......=|
000003e0 b8 72 54 b8 a5 3e 2f d5 7b 85 7e 5e 30 b8 16 03 |.rT..>/.{.~^0...|
000003f0 03 00 42 29 f3 ac 3d c8 6d 0c c1 f6 2b 68 fb 23 |..B)..=.m...+h.#|
00000400 d7 ad 81 aa 70 50 d8 6c 30 bc 09 3d bb ce df 6a |....pP.l0..=...j|
00000410 77 7d 83 11 c0 cb 07 c9 5d 0b 85 29 9d 53 7b 70 |w}......]..).S{p|
00000420 4a 62 ae 0e 98 21 17 8a b5 a3 c1 03 ce c9 0e 54 |Jb...!.........T|
00000430 19 c8 af 9f 2a 16 03 03 00 1c 29 f3 ac 3d c8 6d |....*.....)..=.m|
00000440 0c c2 ef 6b fd 83 40 47 bf 43 52 68 dd b5 76 2b |...k..@G.CRh..v+|
00000450 20 b6 cc 6d eb 52 | ..m.R|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 9 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 16 03 03 02 71 00 00 00 00 00 00 00 03 44 f0 d0 |....q........D..|
00000010 5b e0 72 8f 3d 87 1e 11 b6 07 38 c2 87 c9 43 3b |[.r.=.....8...C;|
00000020 17 5d 1e e6 b6 5f 60 3d aa 22 25 0f a6 a1 e3 c0 |.]..._`=."%.....|
00000030 13 3e a2 ef f1 90 24 47 06 e7 77 af 6b be 9c 20 |.>....$G..w.k.. |
00000040 95 25 45 5d 50 50 28 0a d6 8a 96 11 cd 0a b1 20 |.%E]PP(........ |
00000050 03 4e e9 0f e4 8d d8 e6 0f e7 c2 0f ea a3 b0 a6 |.N..............|
00000060 63 09 ac 93 1a cf cf 71 91 cc ef d4 f7 38 28 b3 |c......q.....8(.|
00000070 21 2d 7e 01 93 6c 6b da d1 72 d2 b4 83 62 c7 1a |!-~..lk..r...b..|
00000080 06 eb 9a 4c 0c b3 26 93 7d 7b fd 87 76 ac 9a 72 |...L..&.}{..v..r|
00000090 99 5d 5a e2 d7 3b d8 de 0d bb 9e 78 bd 38 d7 9f |.]Z..;.....x.8..|
000000a0 21 ea 61 f1 2b 36 2e 27 88 c7 26 7d d5 ca 5f 9e |!.a.+6.'..&}.._.|
000000b0 be 9d aa 43 0a 18 5f ef a8 0c 27 07 01 bb 31 f3 |...C.._...'...1.|
000000c0 c0 9d c1 66 a8 0e 08 c3 0d 3b 83 c8 2f 13 4f af |...f.....;../.O.|
000000d0 89 bc ca 3d 01 00 50 ec 4a ac 4b 90 79 35 c0 5e |...=..P.J.K.y5.^|
000000e0 ea 18 48 31 73 bb 62 24 c4 45 7e a1 78 a2 59 cd |..H1s.b$.E~.x.Y.|
000000f0 2e 78 80 f4 55 62 37 64 a9 7d b1 ad bf a4 71 54 |.x..Ub7d.}....qT|
00000100 63 ae aa eb 07 b1 63 e3 70 5d 8e d9 b6 f2 44 d3 |c.....c.p]....D.|
00000110 e5 f2 b8 af 78 8c ed 9d 69 70 19 19 74 3b 4c c8 |....x...ip..t;L.|
00000120 6e ee 58 72 e0 82 bb 5b f7 7c c7 13 7b 57 50 7b |n.Xr...[.|..{WP{|
00000130 6f 81 2e 6e 97 08 07 e0 64 ad 9b 50 e0 ed d8 11 |o..n....d..P....|
00000140 17 27 1b 32 87 ed fd 04 66 7b e3 e8 13 63 e1 98 |.'.2....f{...c..|
00000150 75 4e 58 ac 0f 32 b0 6a dd 8c 23 e4 63 e7 20 54 |uNX..2.j..#.c. T|
00000160 b4 1f 57 95 17 73 aa 67 09 f3 4c 1a 63 94 65 fd |..W..s.g..L.c.e.|
00000170 d0 b1 b0 0e e9 f9 62 12 87 d0 1a 4e ca 26 50 4e |......b....N.&PN|
00000180 23 c6 3b 52 fe 0e 26 40 2f 0a 03 89 1a 58 5d 89 |#.;R..&@/....X].|
00000190 91 2b 84 82 ec b2 29 8c 40 d3 a0 ec 57 c8 10 4d |.+....).@...W..M|
000001a0 67 2b fb 11 1b 68 58 93 ae bb 6c e7 8b 55 d9 35 |g+...hX...l..U.5|
000001b0 79 e8 7e bf 58 1f c2 bf 86 d2 7f 60 f7 2b 16 72 |y.~.X......`.+.r|
000001c0 2d 15 ef fc 71 93 e7 74 0a 28 89 53 f2 62 8c f0 |-...q..t.(.S.b..|
000001d0 ec 8b 2a bf cf 1b 87 87 18 15 d5 f2 01 59 14 74 |..*..........Y.t|
000001e0 16 f8 d0 8b 86 f4 5d 6a d9 59 fe 08 d7 ba 04 e1 |......]j.Y......|
000001f0 1a 27 78 e0 9d 61 52 8f 98 75 d7 c4 2b fb 62 72 |.'x..aR..u..+.br|
00000200 d2 42 48 03 22 31 b2 c5 0c e3 f4 b4 c5 01 ae 29 |.BH."1.........)|
00000210 fd a2 13 eb ed fe 40 5a 50 9f 2e d1 9c 01 d4 81 |......@ZP.......|
00000220 4c bd 1f d0 19 42 c6 0f 1e 04 f4 91 53 49 63 88 |L....B......SIc.|
00000230 a8 52 72 fc cc c5 3e 7c 84 90 34 5d b5 ce 2a b0 |.Rr...>|..4]..*.|
00000240 4b ad 0c 7f e7 9a 56 c4 d3 5c 25 ba d9 67 b9 b1 |K.....V..\%..g..|
00000250 46 09 86 09 6e be 45 fa 8c bb 8c 0b 57 f2 43 e2 |F...n.E.....W.C.|
00000260 f2 f3 eb ac 6b 3a 06 ac 76 da 69 d7 94 68 2b 91 |....k:..v.i..h+.|
00000270 f4 d8 4f a0 2c ce 16 03 03 00 5e 00 00 00 00 00 |..O.,.....^.....|
00000280 00 00 04 5a cf 0b b8 b8 64 ac f5 5e 9e b0 01 db |...Z....d..^....|
00000290 4b 44 cb 17 7b f1 1f 25 79 2f 8b 01 41 83 1b 3c |KD..{..%y/..A..<|
000002a0 8e c3 0f 3b 8a 62 97 ed da 81 cc 46 26 f8 ec 51 |...;.b.....F&..Q|
000002b0 3e 05 99 d8 33 c7 6f 44 1e f0 11 7d 58 a5 f3 2e |>...3.oD...}X...|
000002c0 23 84 61 98 2e c8 d4 95 ae f8 ca 8e 9e 5e 8b 4b |#.a..........^.K|
000002d0 b4 ac 49 f1 f1 de da 56 76 16 03 03 00 a0 00 00 |..I....Vv.......|
000002e0 00 00 00 00 00 05 02 51 00 38 af 32 10 48 88 a2 |.......Q.8.2.H..|
000002f0 3b b3 35 46 b4 c7 9c 3e ad ab ff 64 aa 8d 51 78 |;.5F...>...d..Qx|
00000300 f5 74 d0 b7 56 30 d7 35 d6 f6 bf 7e 92 c8 3a 99 |.t..V0.5...~..:.|
00000310 85 24 09 53 f8 fc 04 d7 de 43 96 c0 27 76 05 a7 |.$.S.....C..'v..|
00000320 b7 07 e2 6f 22 c7 d7 b0 85 b1 bf e0 4d 27 df 45 |...o".......M'.E|
00000330 ac 09 2a 04 1f f7 ed b0 37 f6 73 39 80 a6 b9 27 |..*.....7.s9...'|
00000340 dc 5d a1 19 19 cd df ce c2 90 93 26 76 10 fd 8a |.].........&v...|
00000350 cf cf bb f3 fb 2d f2 10 df 6e 93 74 2c be 7a 23 |.....-...n.t,.z#|
00000360 12 97 ae 99 d8 91 d3 12 40 dd c9 2f 58 19 79 d1 |........@../X.y.|
00000370 a9 84 a5 ea 5c af f2 72 88 36 e1 00 07 52 14 03 |....\..r.6...R..|
00000380 03 00 19 00 00 00 00 00 00 00 06 71 ef 3b 74 cb |...........q.;t.|
00000390 56 03 aa 33 92 b3 2b 14 1b 58 a4 b6 16 03 03 00 |V..3..+..X......|
000003a0 28 00 00 00 00 00 00 00 00 bd 60 39 44 46 e2 0d |(.........`9DF..|
000003b0 9d 6a cf b8 ba 6e ef e8 a7 3f a9 25 ce 8b 51 7a |.j...n...?.%..Qz|
000003c0 81 fc 50 67 dc 55 d0 11 18 |..Pg.U...|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 10 (server to client)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 14 03 03 00 19 29 f3 ac 3d c8 6d 0c c3 1c 92 f7 |.....)..=.m.....|
00000010 3f c4 1e c9 d0 16 44 4e c0 95 18 a7 31 93 16 03 |?.....DN....1...|
00000020 03 00 28 3c f8 a4 be d9 b2 97 71 b0 02 2b a6 74 |..(<......q..+.t|
00000030 26 e0 d1 dc fb 5e 80 13 4a 4c ef ee 85 4a d0 53 |&....^..JL...J.S|
00000040 a9 0f a1 44 15 90 f3 6b d4 2e 2e 17 03 03 00 21 |...D...k.......!|
00000050 3c f8 a4 be d9 b2 97 72 d0 2b 1b db 4b 45 93 eb |<......r.+..KE..|
00000060 6a 9f 79 84 32 ec de 4e 6f 4d 40 d2 51 af e9 46 |j.y.2..NoM@.Q..F|
00000070 89 16 03 03 00 1c 3c f8 a4 be d9 b2 97 73 f2 99 |......<......s..|
00000080 89 f3 d9 74 af f5 b8 5f bc 04 fe f3 67 20 3f 3a |...t..._....g ?:|
00000090 3d 25 |=%|
crypto/tls: allow renegotiation to be handled by a client. This change adds Config.Renegotiation which controls whether a TLS client will accept renegotiation requests from a server. This is used, for example, by some web servers that wish to “add” a client certificate to an HTTPS connection. This is disabled by default because it significantly complicates the state machine. Originally, handshakeMutex was taken before locking either Conn.in or Conn.out. However, if renegotiation is permitted then a handshake may be triggered during a Read() call. If Conn.in were unlocked before taking handshakeMutex then a concurrent Read() call could see an intermediate state and trigger an error. Thus handshakeMutex is now locked after Conn.in and the handshake functions assume that Conn.in is locked for the duration of the handshake. Additionally, handshakeMutex used to protect Conn.out also. With the possibility of renegotiation that's no longer viable and so writeRecordLocked has been split off. Fixes #5742. Change-Id: I935914db1f185d507ff39bba8274c148d756a1c8 Reviewed-on: https://go-review.googlesource.com/22475 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Russ Cox <rsc@golang.org>
2016-04-26 18:45:35 +01:00
>>> Flow 11 (client to server)
crypto/tls: switch to OpenSSL 1.1.0 for test data. We will need OpenSSL 1.1.0 in order to test some of the features expected for Go 1.8. However, 1.1.0 also disables (by default) some things that we still want to test, such as RC4, 3DES and SSLv3. Thus developers wanting to update the crypto/tls test data will need to build OpenSSL from source. This change updates the test data with transcripts generated by 1.1.0 (in order to reduce future diffs) and also causes a banner to be printed if 1.1.0 is not used when updating. (The test for an ALPN mismatch is removed because OpenSSL now terminates the connection with a fatal alert if no known ALPN protocols are offered. There's no point testing against this because it's an OpenSSL behaviour.) Change-Id: I957516975e0b8c7def84184f65c81d0b68f1c551 Reviewed-on: https://go-review.googlesource.com/30821 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-11 18:08:57 +01:00
00000000 15 03 03 00 1a 00 00 00 00 00 00 00 01 3e 03 9b |.............>..|
00000010 14 92 cf 34 45 d0 e6 94 fd c4 9c 14 58 8b e5 15 |...4E.......X...|
00000020 03 03 00 1a 00 00 00 00 00 00 00 02 7b 6d 0c ee |............{m..|
00000030 ae 77 a8 12 1f ea 4b 4a f3 9e 58 2d 8e 28 |.w....KJ..X-.(|
Reference in New Issue Copy Permalink