Alternative TLS implementation in Go
Go to file
Jonathan Rudenberg 03a329f274 crypto/tls: add support for session ticket key rotation
This change adds a new method to tls.Config, SetSessionTicketKeys, that
changes the key used to encrypt session tickets while the server is
running. Additional keys may be provided that will be used to maintain
continuity while rotating keys. If a ticket encrypted with an old key is
provided by the client, the server will resume the session and provide
the client with a ticket encrypted using the new key.

Fixes #9994

Change-Id: Idbc16b10ff39616109a51ed39a6fa208faad5b4e
Reviewed-on: https://go-review.googlesource.com/9072
Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com>
Reviewed-by: Adam Langley <agl@golang.org>
2015-04-26 20:57:28 +00:00
testdata crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
alert.go crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
cipher_suites.go crypto/tls: disable RC4 by default. 2015-03-18 00:38:14 +00:00
common.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
conn_test.go crypto/tls: Added dynamic alternative to NameToCertificate map for SNI 2014-08-06 11:22:00 -07:00
conn.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
example_test.go crypto/x509: add example of using a custom root list. 2014-02-19 11:18:35 -05:00
generate_cert.go crypto/tls: Support ECDSA keys in generate_cert.go 2014-07-28 14:46:34 -07:00
handshake_client_test.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
handshake_client.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_messages_test.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_messages.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_server_test.go crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
handshake_server.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
handshake_test.go crypto/tls: rework reference tests. 2013-12-20 11:37:05 -05:00
key_agreement.go crypto/tls: make use of crypto.Signer and crypto.Decrypter 2015-04-02 23:19:57 +00:00
prf_test.go crypto/tls: add support for AES_256_GCM_SHA384 cipher suites specified in RFC5289 2015-02-04 00:18:14 +00:00
prf.go crypto/tls: panic with unknown hash functions. 2015-03-18 00:37:56 +00:00
ticket.go crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
tls_test.go crypto/tls: implement tls-unique channel binding (RFC 5929 section 3). 2014-08-11 16:40:42 -07:00
tls.go crypto/tls: remove return parameter stutter 2015-01-13 21:35:11 +00:00