Alternative TLS implementation in Go
Go to file
Adam Langley 0269b0170f crypto/tls: call GetCertificate if Certificates is empty.
This change causes the GetCertificate callback to be called if
Certificates is empty. Previously this configuration would result in an
error.

This allows people to have servers that depend entirely on dynamic
certificate selection, even when the client doesn't send SNI.

Fixes #9208.

Change-Id: I2f5a5551215958b88b154c64a114590300dfc461
Reviewed-on: https://go-review.googlesource.com/8792
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Run-TryBot: Adam Langley <agl@golang.org>
2015-04-26 22:00:35 +00:00
testdata crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
alert.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
cipher_suites.go crypto/tls: disable RC4 by default. 2015-03-18 00:38:14 +00:00
common.go crypto/tls: call GetCertificate if Certificates is empty. 2015-04-26 22:00:35 +00:00
conn_test.go crypto/tls: Added dynamic alternative to NameToCertificate map for SNI 2014-08-06 11:22:00 -07:00
conn.go crypto/tls: add OCSP response to ConnectionState 2015-04-26 22:00:13 +00:00
example_test.go crypto/x509: add example of using a custom root list. 2014-02-19 11:18:35 -05:00
generate_cert.go crypto/tls: Support ECDSA keys in generate_cert.go 2014-07-28 14:46:34 -07:00
handshake_client_test.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
handshake_client.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_messages_test.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_messages.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_server_test.go crypto/tls: call GetCertificate if Certificates is empty. 2015-04-26 22:00:35 +00:00
handshake_server.go crypto/tls: call GetCertificate if Certificates is empty. 2015-04-26 22:00:35 +00:00
handshake_test.go crypto/tls: rework reference tests. 2013-12-20 11:37:05 -05:00
key_agreement.go crypto/tls: make use of crypto.Signer and crypto.Decrypter 2015-04-02 23:19:57 +00:00
prf_test.go crypto/tls: add support for AES_256_GCM_SHA384 cipher suites specified in RFC5289 2015-02-04 00:18:14 +00:00
prf.go crypto/tls: panic with unknown hash functions. 2015-03-18 00:37:56 +00:00
ticket.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
tls_test.go crypto/tls: implement tls-unique channel binding (RFC 5929 section 3). 2014-08-11 16:40:42 -07:00
tls.go crypto/tls: remove return parameter stutter 2015-01-13 21:35:11 +00:00