80fe037
(tests) Client Authentication: Tests against boringssl by
2018-02-14 07:27:33 +0000
6acee69
Use certificate_request specific to TLS 1.3 by
2018-03-26 16:08:18 +0100
c6745f1
Client authentication by
2018-03-26 16:20:25 +0100
e62ddc0
Adds structure for certificate_request in TLS 1.3 by
2018-03-26 16:13:03 +0100
054f9b8
Adds 'certificate required' alert by
2018-03-26 16:56:31 +0100
b05f4a6
Adds ID for CA's extension by
2018-03-26 16:11:39 +0100
ddfc58e
Changes dependency from go v1.9 to go v1.10 by
2018-03-21 16:19:14 +0000
f1a5602
crypto/tls: optional "certificate_status" with OCSP by
2018-01-04 00:42:10 -0600
2e765ef
crypto/tls: document VerifyPeerCertificate behavior in relation to ClientAuth by
2017-12-16 09:35:52 -0400
d3da622
Revert "Use go 1.10 and aligns with current state of TLS in go/crypto/tls" (#77) by
2018-03-21 14:27:31 +0000
1313809
(CI) Use go 1.10 also for bogo testing by
2018-03-12 15:37:43 +0000
ec236c5
[PATCH] all: use HTTPS for iana.org links by
2018-03-12 14:16:52 +0000
137239b
crypto/tls: handle errors in generate_cert.go by
2018-02-01 12:21:44 -0800
0957fdb
crypto/tls: optional "certificate_status" with OCSP by
2018-01-04 00:42:10 -0600
eaa1196
crypto/tls: document VerifyPeerCertificate behavior in relation to ClientAuth by
2017-12-16 09:35:52 -0400
70e5aeb
(CI) Use go 10 by
2018-03-02 12:49:15 +0000
03db2e7
Merge pull request #71 from henrydcase/dev/package_prep_makefile by
2018-03-13 05:28:31 +0000
cb44346
Makefile improvement by
2018-03-01 14:51:40 +0000
a982da0
tris: allow failure of NSS interop tests at HEAD by
2018-02-08 16:26:04 +0100
05688e5
tris: make Travis-CI use Go 1.9 by
2017-12-21 13:48:43 +0100
844036d
tris: remove github.com/cloudflare/go by
2017-12-20 12:16:34 +0100
8db4726
tris: update tests to track draft 22 by
2017-11-14 15:43:14 +0000
824987c
tris: implement draft-22 middlebox compatibility mode by
2017-11-12 07:44:45 +0000
a0bab17
tris: update Server Hello processing for D22 by
2017-11-12 06:14:10 +0000
e89292c
tris: convert end_of_early_data to a handshake message by
2017-12-01 14:53:26 +0000
69dddf0
tris: update NewSessionTicket for draft -19 and -21 by
2017-11-12 02:11:32 +0000
fd93e9e
tris: implement D19 and D20 changes for secrets by
2017-11-11 04:41:25 +0000
ac01048
tris: add NSS server to client interop tests by
2017-12-05 16:21:28 +0000
c89a0a5
tris: Add initial client interoperability tests by
2017-08-31 15:03:22 +0100
dee1362
tris: enable client tests with bogo shim by
2017-11-27 16:51:15 +0000
e9ff50f
tris: process ALPN in EE received by client by
2017-09-21 14:27:53 +0100
0b636d2
crypto/tls: enable certificate validation on the client by
2017-09-15 19:04:39 +0100
92d04f3
tris: advertise PSS in Client Hello for TLS 1.3 by
2017-11-27 16:44:01 +0000
928e35b
crypto/tls: extract certificate validation for the client by
2017-09-15 18:30:24 +0100
9e25a0a
crypto/tls: initial TLS 1.3 client support by
2017-11-27 16:05:46 +0000
634f9a5
crypto/tls: prepare for TLS 1.3 client handshake. by
2017-11-27 15:47:45 +0000
9eb1d7f
crypto/tls: skip session cache for TLS 1.3 by
2017-09-12 19:39:14 +0100
9f46cf9
crypto/tls: add RSASSA-PSS support for handshake messages by
2017-11-22 19:27:20 +0000
1850fd0
crypto/tls: consolidate signatures handling in SKE and CV by
2017-11-22 18:25:20 +0000
759dbb3
tris: fix nonce length definition and actually use it by
2017-11-30 18:43:18 +0000
b1e5fea
tris: prevent sending 0.5-RTT data by
2017-09-21 11:34:37 +0100
8523d7d
tris: ignore NewSessionTicket messages as client by
2017-11-12 02:18:00 +0000
de3ae8f
tris: accept other post-handshake messages as client by
2017-11-12 01:02:42 +0000
4e6ebb6
tris: unify ServerHello processing in preparation for D22 by
2017-11-24 18:10:50 +0000
0bbbecd
crypto/tls: accept 2^14+1 TLSInnerPlaintext by
2017-10-04 16:05:13 +0100
fa9ccdc
Merge branch 'pwu/go-update/master' into pwu/master-merge-upstream by
2017-11-14 13:58:35 +0000
9e22da5
tris: restore retry logic on warning alerts by
2017-11-14 13:32:40 +0000
ff1bc54
crypto/tls: limit number of consecutive warning alerts by
2017-11-03 03:45:04 +0100
64bffb7
crypto/tls: advertise support for SHA-512 signatures in 1.2 by
2017-10-31 19:43:05 -0400
5731b52
archive/zip, crypto/tls: use rand.Read instead of casting ints to bytes by
2017-07-03 15:38:55 -0700
00b53d3
crypto/tls: remove bookkeeping code from pHash function by
2017-10-16 07:25:14 +0100
6c380f3
crypto/tls: replace signatureAndHash by SignatureScheme. by
2017-09-07 17:50:10 +0100
8ae95fd
crypto/tls: fix first byte test for 255 CBC padding bytes by
2017-10-04 13:44:34 +0100
8251c0f
all: revert "all: prefer strings.LastIndexByte over strings.LastIndex" by
2017-10-05 15:50:11 +0200
710e9e9
crypto/tls: Use a backing array for getSupportedVersions by
2017-10-02 18:34:42 +1030
1192d25
crypto/tls: fix SCT decoding by
2017-09-29 17:00:46 +0100
d16cde6
tris: enable TLS 1.3 for tris-localserver again. by
2017-09-13 14:20:11 +0100
aab74cb
crypto/tls: allow client to pick TLS 1.3, do not enable it by default. by
2017-09-12 18:49:42 +0100
857c724
crypto/tls: check that client cipher suite matches version by
2017-09-12 19:52:05 +0100
998f770
crypto/tls: remove TLS13CipherSuites. by
2017-09-12 19:50:24 +0100
599c1f9
crypto/tls: Don't advertise TLS 1.3-only cipher unless attempting TLS 1.3 by
2017-03-26 21:26:40 +1030
d7983b0
all: prefer bytes.IndexByte over bytes.Index by
2017-09-21 19:23:51 +0200
d547ccf
all: prefer strings.LastIndexByte over strings.LastIndex by
2017-09-25 15:47:44 +0200
3107d57
tris: implement SSLKEYLOGFILE for TLS 1.3 server by
2017-09-18 16:50:43 +0100
6f58025
tris: use keySchedule13 for the server by
2017-09-18 16:01:36 +0100
9f9f06d
tris: add new key schedule implementation by
2017-09-18 15:55:55 +0100
079992e
tris: whitespace fix by
2017-09-18 13:39:26 +0100
0648fb0
all: fix article typos by
2017-09-15 10:24:47 +0900
2fda84b
crypto/tls: fix clientHelloMsg fuzzer not to generate the RI SCSV by
2017-01-11 13:46:27 -0800
50729f1
crypto/tls: fix and expand TestVerifyPeerCertificate and TestGetClientCertificate by
2017-07-04 19:46:59 +0100
25f2efc
tris: update Go to 1.9 by
2017-09-04 12:18:37 +0100
cd63e47
tris: rename `pk` to `secretKey` by
2017-06-06 11:37:09 -0700
d4b8398
tris: fix typos by
2017-06-01 14:09:33 -0700
4b944d1
tris: typos by
2017-07-03 15:24:46 +0100
44343a1
tris: make the boring incremental build deterministic by
2017-06-05 15:16:43 -0700
7d575cd
tris: add Dockerfile to run unit tests with -update by
2017-06-03 16:26:17 -0700
bc76e35
tris-localserver: fix Content-Type header for /ch endpoint (#21) by
2017-04-10 02:02:53 +0930
f4a6690
crypto/tls: generate unique ticket_age_add for each ticket by
2017-04-10 02:01:24 +0930
ba45c1a
tris: add echo.filippo.io by
2017-03-08 15:44:37 +0000
7f449cb
tris: add SessionTicketSealer by
2017-02-23 03:26:04 +0530
2ace09e
tris: upgrade to Go 1.8 by
2017-02-17 12:32:52 -0500
fc5cd7e
crypto/tls: fix SCT extension wire format by
2017-02-15 18:52:13 -0500
80f82d8
crypto/tls: avoid sending empty OCSP or SCT cert extensions by
2017-02-15 16:51:32 -0500
815d56e
tris: update README for public consumption by
2017-02-14 17:47:21 -0500
4f7b598
crypto/tls: add ConnectionState.Unique0RTTToken by
2017-02-09 20:50:39 +0000
563bf91
tris: update to Go 1.8rc3+ by
2017-02-07 17:01:42 +0000
0d97989
tris: move Commit to just before key share generation by
2017-02-07 16:47:02 +0000
ed105dc
crypto/tls: add SignedCertificateTimestamps and OCSPStaple to 1.3 by
2017-02-03 11:36:10 -0800
9b94b65
crypto/tls: send two session tickets to TLS 1.3 clients by
2017-01-30 18:03:46 +0000
44df381
crypto/tls: peek at unencrypted alerts to give better errors by
2017-01-30 17:54:36 +0000
740fc92
tris: add single line TLSDEBUG=short by
2017-01-24 18:56:43 +0000
7aa5427
tris: update to Go 1.8rc2 by
2017-01-24 12:30:04 +0000
6bff168
tris: add proper BoGo tests by
2017-01-18 18:59:59 +0000
c758567
crypto/tls: detect unexpected leftover handshake data by
2017-01-18 17:13:07 +0000
de613b1
crypto/tls: disallow handshake messages fragmented across CCS by
2017-01-18 16:53:35 +0000
4191962
crypto/tls: use correct alerts by
2017-01-16 12:23:17 +0000
5406418
crypto/tls: fix panic in PSK binders parsing by
2017-01-16 13:28:52 +0000
bbb712b
crypto/tls: simplify supported points handling to match BoringSSL by
2017-01-16 13:13:27 +0000
922b99e
crypto/tls: make 1.3 version negotiation more robust by
2017-01-16 12:29:54 +0000
58aab36
crypto/tls: use negotiated version for fallback check by
2017-01-16 12:50:54 +0000