Commit Graph

  • 80fe037aa8 (tests) Client Authentication: Tests against boringssl Kris 2018-02-14 07:27:33 +0000
  • 6acee69d6b Use certificate_request specific to TLS 1.3 Henry D. Case 2018-03-26 16:08:18 +0100
  • c6745f1879 Client authentication Henry D. Case 2018-03-26 16:20:25 +0100
  • e62ddc004c Adds structure for certificate_request in TLS 1.3 Henry D. Case 2018-03-26 16:13:03 +0100
  • 054f9b8f24 Adds 'certificate required' alert Henry D. Case 2018-03-26 16:56:31 +0100
  • b05f4a6a51 Adds ID for CA's extension Henry D. Case 2018-03-26 16:11:39 +0100
  • ddfc58e5be Changes dependency from go v1.9 to go v1.10 Henry D. Case 2018-03-21 16:19:14 +0000
  • f1a5602bba crypto/tls: optional "certificate_status" with OCSP Brad Burch 2018-01-04 00:42:10 -0600
  • 2e765efc88 crypto/tls: document VerifyPeerCertificate behavior in relation to ClientAuth Filippo Valsorda 2017-12-16 09:35:52 -0400
  • d3da622def
    Revert "Use go 1.10 and aligns with current state of TLS in go/crypto/tls" (#77) Henry Dorsett Case 2018-03-21 14:27:31 +0000
  • 1313809b2b (CI) Use go 1.10 also for bogo testing Henry D. Case 2018-03-12 15:37:43 +0000
  • ec236c5591 [PATCH] all: use HTTPS for iana.org links Henry D. Case 2018-03-12 14:16:52 +0000
  • 137239b5b7 crypto/tls: handle errors in generate_cert.go Kevin Burke 2018-02-01 12:21:44 -0800
  • 0957fdb171 crypto/tls: optional "certificate_status" with OCSP Brad Burch 2018-01-04 00:42:10 -0600
  • eaa1196b44 crypto/tls: document VerifyPeerCertificate behavior in relation to ClientAuth Filippo Valsorda 2017-12-16 09:35:52 -0400
  • 70e5aeb62a (CI) Use go 10 Henry D. Case 2018-03-02 12:49:15 +0000
  • 03db2e7d58
    Merge pull request #71 from henrydcase/dev/package_prep_makefile Henry Dorsett Case 2018-03-13 05:28:31 +0000
  • cb443468e8 Makefile improvement Henry D. Case 2018-03-01 14:51:40 +0000
  • a982da063d tris: allow failure of NSS interop tests at HEAD Filippo Valsorda 2018-02-08 16:26:04 +0100
  • 05688e56f4 tris: make Travis-CI use Go 1.9 Filippo Valsorda 2017-12-21 13:48:43 +0100
  • 844036d474 tris: remove github.com/cloudflare/go Filippo Valsorda 2017-12-20 12:16:34 +0100
  • 8db472667b tris: update tests to track draft 22 Peter Wu 2017-11-14 15:43:14 +0000
  • 824987c5ad tris: implement draft-22 middlebox compatibility mode Peter Wu 2017-11-12 07:44:45 +0000
  • a0bab1759d tris: update Server Hello processing for D22 Peter Wu 2017-11-12 06:14:10 +0000
  • e89292ccbe tris: convert end_of_early_data to a handshake message Peter Wu 2017-12-01 14:53:26 +0000
  • 69dddf0612 tris: update NewSessionTicket for draft -19 and -21 Peter Wu 2017-11-12 02:11:32 +0000
  • fd93e9ecf6 tris: implement D19 and D20 changes for secrets Peter Wu 2017-11-11 04:41:25 +0000
  • ac01048c5e tris: add NSS server to client interop tests Peter Wu 2017-12-05 16:21:28 +0000
  • c89a0a5f3a tris: Add initial client interoperability tests Peter Wu 2017-08-31 15:03:22 +0100
  • dee13626ef tris: enable client tests with bogo shim Peter Wu 2017-11-27 16:51:15 +0000
  • e9ff50fcb0 tris: process ALPN in EE received by client Peter Wu 2017-09-21 14:27:53 +0100
  • 0b636d21fb crypto/tls: enable certificate validation on the client Peter Wu 2017-09-15 19:04:39 +0100
  • 92d04f3ebd tris: advertise PSS in Client Hello for TLS 1.3 Peter Wu 2017-11-27 16:44:01 +0000
  • 928e35b73a crypto/tls: extract certificate validation for the client Peter Wu 2017-09-15 18:30:24 +0100
  • 9e25a0a25d crypto/tls: initial TLS 1.3 client support Peter Wu 2017-11-27 16:05:46 +0000
  • 634f9a5858 crypto/tls: prepare for TLS 1.3 client handshake. Peter Wu 2017-11-27 15:47:45 +0000
  • 9eb1d7faf7 crypto/tls: skip session cache for TLS 1.3 Peter Wu 2017-09-12 19:39:14 +0100
  • 9f46cf9e2d crypto/tls: add RSASSA-PSS support for handshake messages Peter Wu 2017-11-22 19:27:20 +0000
  • 1850fd015e crypto/tls: consolidate signatures handling in SKE and CV Peter Wu 2017-11-22 18:25:20 +0000
  • 759dbb355a tris: fix nonce length definition and actually use it Peter Wu 2017-11-30 18:43:18 +0000
  • b1e5feadef tris: prevent sending 0.5-RTT data Peter Wu 2017-09-21 11:34:37 +0100
  • 8523d7d8e0 tris: ignore NewSessionTicket messages as client Peter Wu 2017-11-12 02:18:00 +0000
  • de3ae8f61d tris: accept other post-handshake messages as client Peter Wu 2017-11-12 01:02:42 +0000
  • 4e6ebb63dd tris: unify ServerHello processing in preparation for D22 Peter Wu 2017-11-24 18:10:50 +0000
  • 0bbbecd894 crypto/tls: accept 2^14+1 TLSInnerPlaintext Peter Wu 2017-10-04 16:05:13 +0100
  • fa9ccdc8b0 Merge branch 'pwu/go-update/master' into pwu/master-merge-upstream Peter Wu 2017-11-14 13:58:35 +0000
  • 9e22da5ecc tris: restore retry logic on warning alerts Peter Wu 2017-11-14 13:32:40 +0000
  • ff1bc5469f crypto/tls: limit number of consecutive warning alerts filewalkwithme 2017-11-03 03:45:04 +0100
  • 64bffb76ca crypto/tls: advertise support for SHA-512 signatures in 1.2 Filippo Valsorda 2017-10-31 19:43:05 -0400
  • 5731b5256b archive/zip, crypto/tls: use rand.Read instead of casting ints to bytes Carl Mastrangelo 2017-07-03 15:38:55 -0700
  • 00b53d39c3 crypto/tls: remove bookkeeping code from pHash function Joe Kyo 2017-10-16 07:25:14 +0100
  • 6c380f3bb6 crypto/tls: replace signatureAndHash by SignatureScheme. Peter Wu 2017-09-07 17:50:10 +0100
  • 8ae95fd882 crypto/tls: fix first byte test for 255 CBC padding bytes Peter Wu 2017-10-04 13:44:34 +0100
  • 8251c0f791 all: revert "all: prefer strings.LastIndexByte over strings.LastIndex" Marvin Stenger 2017-10-05 15:50:11 +0200
  • 710e9e9631 crypto/tls: Use a backing array for getSupportedVersions Tom Thorogood 2017-10-02 18:34:42 +1030
  • 1192d2574f crypto/tls: fix SCT decoding Peter Wu 2017-09-29 17:00:46 +0100
  • d16cde640d tris: enable TLS 1.3 for tris-localserver again. Peter Wu 2017-09-13 14:20:11 +0100
  • aab74cb372 crypto/tls: allow client to pick TLS 1.3, do not enable it by default. Peter Wu 2017-09-12 18:49:42 +0100
  • 857c7243c9 crypto/tls: check that client cipher suite matches version Peter Wu 2017-09-12 19:52:05 +0100
  • 998f77009e crypto/tls: remove TLS13CipherSuites. Peter Wu 2017-09-12 19:50:24 +0100
  • 599c1f949b crypto/tls: Don't advertise TLS 1.3-only cipher unless attempting TLS 1.3 Tom Thorogood 2017-03-26 21:26:40 +1030
  • d7983b094e all: prefer bytes.IndexByte over bytes.Index Marvin Stenger 2017-09-21 19:23:51 +0200
  • d547ccf7ac all: prefer strings.LastIndexByte over strings.LastIndex Marvin Stenger 2017-09-25 15:47:44 +0200
  • 3107d575a8 tris: implement SSLKEYLOGFILE for TLS 1.3 server Peter Wu 2017-09-18 16:50:43 +0100
  • 6f580251ca tris: use keySchedule13 for the server Peter Wu 2017-09-18 16:01:36 +0100
  • 9f9f06de80 tris: add new key schedule implementation Peter Wu 2017-09-18 15:55:55 +0100
  • 079992e500 tris: whitespace fix Peter Wu 2017-09-18 13:39:26 +0100
  • 0648fb0f1c all: fix article typos Kunpei Sakai 2017-09-15 10:24:47 +0900
  • 2fda84b4f0 crypto/tls: fix clientHelloMsg fuzzer not to generate the RI SCSV EKR 2017-01-11 13:46:27 -0800
  • 50729f1a6c crypto/tls: fix and expand TestVerifyPeerCertificate and TestGetClientCertificate Filippo Valsorda 2017-07-04 19:46:59 +0100
  • 25f2efc996 tris: update Go to 1.9 Peter Wu 2017-09-04 12:18:37 +0100
  • cd63e47f2c tris: rename pk to secretKey Henry de Valence 2017-06-06 11:37:09 -0700
  • d4b8398461 tris: fix typos Henry de Valence 2017-06-01 14:09:33 -0700
  • 4b944d1428 tris: typos Tomas Susanka 2017-07-03 15:24:46 +0100
  • 44343a1e4d tris: make the boring incremental build deterministic Filippo Valsorda 2017-06-05 15:16:43 -0700
  • 7d575cd9ba tris: add Dockerfile to run unit tests with -update Filippo Valsorda 2017-06-03 16:26:17 -0700
  • bc76e35b75 tris-localserver: fix Content-Type header for /ch endpoint (#21) Tom Thorogood 2017-04-10 02:02:53 +0930
  • f4a6690edc crypto/tls: generate unique ticket_age_add for each ticket Tom Thorogood 2017-04-10 02:01:24 +0930
  • ba45c1a5ca tris: add echo.filippo.io Filippo Valsorda 2017-03-08 15:44:37 +0000
  • 7f449cbaa7 tris: add SessionTicketSealer Filippo Valsorda 2017-02-23 03:26:04 +0530
  • 2ace09e9b4 tris: upgrade to Go 1.8 Filippo Valsorda 2017-02-17 12:32:52 -0500
  • fc5cd7e2f9 crypto/tls: fix SCT extension wire format Filippo Valsorda 2017-02-15 18:52:13 -0500
  • 80f82d89c7 crypto/tls: avoid sending empty OCSP or SCT cert extensions Filippo Valsorda 2017-02-15 16:51:32 -0500
  • 815d56e5a7 tris: update README for public consumption Filippo Valsorda 2017-02-14 17:47:21 -0500
  • 4f7b5988a3 crypto/tls: add ConnectionState.Unique0RTTToken Filippo Valsorda 2017-02-09 20:50:39 +0000
  • 563bf91c28 tris: update to Go 1.8rc3+ Filippo Valsorda 2017-02-07 17:01:42 +0000
  • 0d97989e0d tris: move Commit to just before key share generation Filippo Valsorda 2017-02-07 16:47:02 +0000
  • ed105dc308 crypto/tls: add SignedCertificateTimestamps and OCSPStaple to 1.3 Brendan Mc 2017-02-03 11:36:10 -0800
  • 9b94b65b7b crypto/tls: send two session tickets to TLS 1.3 clients Filippo Valsorda 2017-01-30 18:03:46 +0000
  • 44df381ccb crypto/tls: peek at unencrypted alerts to give better errors Filippo Valsorda 2017-01-30 17:54:36 +0000
  • 740fc926aa tris: add single line TLSDEBUG=short Filippo Valsorda 2017-01-24 18:56:43 +0000
  • 7aa542753f tris: update to Go 1.8rc2 Filippo Valsorda 2017-01-24 12:30:04 +0000
  • 6bff168a06 tris: add proper BoGo tests Filippo Valsorda 2017-01-18 18:59:59 +0000
  • c758567785 crypto/tls: detect unexpected leftover handshake data Filippo Valsorda 2017-01-18 17:13:07 +0000
  • de613b152d crypto/tls: disallow handshake messages fragmented across CCS Filippo Valsorda 2017-01-18 16:53:35 +0000
  • 4191962f25 crypto/tls: use correct alerts Filippo Valsorda 2017-01-16 12:23:17 +0000
  • 5406418371 crypto/tls: fix panic in PSK binders parsing Filippo Valsorda 2017-01-16 13:28:52 +0000
  • bbb712bfd8 crypto/tls: simplify supported points handling to match BoringSSL Filippo Valsorda 2017-01-16 13:13:27 +0000
  • 922b99e473 crypto/tls: make 1.3 version negotiation more robust Filippo Valsorda 2017-01-16 12:29:54 +0000
  • 58aab36b6e crypto/tls: use negotiated version for fallback check Filippo Valsorda 2017-01-16 12:50:54 +0000