kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
03a329f274
th5/testdata
History
Jonathan Rudenberg 03a329f274 crypto/tls: add support for session ticket key rotation 
This change adds a new method to tls.Config, SetSessionTicketKeys, that
changes the key used to encrypt session tickets while the server is
running. Additional keys may be provided that will be used to maintain
continuity while rotating keys. If a ticket encrypted with an old key is
provided by the client, the server will resume the session and provide
the client with a ticket encrypted using the new key.

Fixes #9994

Change-Id: Idbc16b10ff39616109a51ed39a6fa208faad5b4e
Reviewed-on: https://go-review.googlesource.com/9072
Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com>
Reviewed-by: Adam Langley <agl@golang.org>
2015-04-26 20:57:28 +00:00
..
Client-TLSv10-ClientCert-ECDSA-ECDSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-ClientCert-ECDSA-RSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-ClientCert-RSA-ECDSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-ClientCert-RSA-RSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-ECDHE-ECDSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-ECDHE-RSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv10-RSA-RC4 crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv11-ECDHE-ECDSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv11-ECDHE-RSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv11-RSA-RC4 crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ALPN crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ALPN-NoMatch crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ClientCert-ECDSA-ECDSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ClientCert-ECDSA-RSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ClientCert-RSA-AES256-GCM-SHA384 crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ClientCert-RSA-ECDSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ClientCert-RSA-RSA crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ECDHE-ECDSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ECDHE-ECDSA-AES256-GCM-SHA384 crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ECDHE-ECDSA-AES-GCM crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-ECDHE-RSA-AES crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-RSA-RC4 crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Client-TLSv12-SCT crypto/tls: add support for Certificate Transparency 2015-04-26 16:53:11 +00:00
Server-SSLv3-RSA-3DES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-SSLv3-RSA-AES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-SSLv3-RSA-RC4 crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv10-ECDHE-ECDSA-AES crypto/ecdsa: make Sign safe with broken entropy sources 2015-01-28 01:39:51 +00:00
Server-TLSv10-RSA-3DES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv10-RSA-AES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv10-RSA-RC4 crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv11-FallbackSCSV crypto/tls: support TLS_FALLBACK_SCSV as a server. 2014-10-15 17:54:04 -07:00
Server-TLSv11-RSA-RC4 crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-ALPN crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-ALPN-NoMatch crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-CipherSuiteCertPreferenceECDSA crypto/ecdsa: make Sign safe with broken entropy sources 2015-01-28 01:39:51 +00:00
Server-TLSv12-CipherSuiteCertPreferenceRSA crypto/ecdsa: make Sign safe with broken entropy sources 2015-01-28 01:39:51 +00:00
Server-TLSv12-ClientAuthRequestedAndECDSAGiven crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-ClientAuthRequestedAndGiven crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-ClientAuthRequestedNotGiven crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-ECDHE-ECDSA-AES crypto/ecdsa: make Sign safe with broken entropy sources 2015-01-28 01:39:51 +00:00
Server-TLSv12-IssueTicket crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-IssueTicketPreDisable crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-Resume crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-ResumeDisabled crypto/tls: add support for session ticket key rotation 2015-04-26 20:57:28 +00:00
Server-TLSv12-RSA-3DES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-RSA-AES crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-RSA-AES256-GCM-SHA384 crypto/tls: add support for AES_256_GCM_SHA384 cipher suites specified in RFC5289 2015-02-04 00:18:14 +00:00
Server-TLSv12-RSA-AES-GCM crypto/tls: pick ECDHE curves based on server preference. 2014-02-24 17:57:51 -05:00
Server-TLSv12-RSA-RC4 crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-SNI crypto/tls: support renegotiation extension. 2014-01-09 13:38:11 -05:00
Server-TLSv12-SNI-GetCertificate crypto/tls: fix test data generation 2015-04-16 18:16:37 +00:00
Server-TLSv12-SNI-GetCertificateNotFound crypto/tls: fix test data generation 2015-04-16 18:16:37 +00:00