Peter Wu
a0bab1759d
tris: update Server Hello processing for D22
...
Check SupportedVersions for the actual version and verify that the
server sets the correct SeverHello.legacy_version. Change D21 to D22.
2017-12-13 20:15:00 +00:00
Peter Wu
fd93e9ecf6
tris: implement D19 and D20 changes for secrets
...
D19 added an additional pre-extract Derive-Secret stage. D20 shortened
labels. Bump from D18 to D21 with no backwards compat option for now
since older drafts are considered undeployable.
2017-12-13 17:49:25 +00:00
Peter Wu
d16cde640d
tris: enable TLS 1.3 for tris-localserver again.
...
The default version (TLS 1.2) is no longer overridden with TLS 1.3 so
the server must explicitly set it.
Fixes: ("crypto/tls: allow client to pick TLS 1.3, do not enable it by default.")
2017-09-29 12:47:55 +01:00
Peter Wu
3107d575a8
tris: implement SSLKEYLOGFILE for TLS 1.3 server
...
This makes it easier to validate the handshake contents using Wireshark.
2017-09-21 15:37:34 +01:00
Tom Thorogood
bc76e35b75
tris-localserver: fix Content-Type header for /ch endpoint ( #21 )
2017-09-05 21:06:35 +01:00
Filippo Valsorda
faefac5f1a
crypto/tls: stop ConfirmHandshake from locking on any Read
...
ConfirmHandshake should block on a Read until the handshakeConfirmed
state is reached, but past that it shouldn't.
2017-09-05 21:06:34 +01:00
Filippo Valsorda
df557b2b05
tris: fix NSS 0-RTT interop
2017-09-05 21:06:34 +01:00
Filippo Valsorda
f8c15889af
crypto/tls: implement TLS 1.3 server 0-RTT
2017-09-05 21:06:34 +01:00
Filippo Valsorda
ee3048cfd2
crypto/tls: implement TLS 1.3 server PSK
2017-09-05 21:06:34 +01:00
Filippo Valsorda
4b0d17eca3
crypto/tls: implement TLS 1.3 minimal server
2017-09-05 21:06:29 +01:00
Filippo Valsorda
6e85ff94f0
tris: import go wrapper and interoperability tests
2017-09-05 20:29:43 +01:00
