Alternative TLS implementation in Go
Go to file
Adam Langley 493b985991 crypto/tls: don't select TLS 1.2 cipher suites in prior versions.
AES-GCM cipher suites are only defined for TLS 1.2, although there's
nothing really version specific about them. However, development
versions of NSS (meaning Firefox and Chrome) have an issue where
they'll advertise TLS 1.2-only cipher suites in a TLS 1.1 ClientHello
but then balk when the server selects one.

This change causes Go clients not to advertise TLS 1.2 cipher suites
unless TLS 1.2 is being used, and prevents servers from selecting them
unless TLS 1.2 has been negotiated.

https://code.google.com/p/chromium/issues/detail?id=297151
https://bugzilla.mozilla.org/show_bug.cgi?id=919677

R=golang-dev, rsc
CC=golang-dev
https://golang.org/cl/13573047
2013-09-26 17:09:56 -04:00
alert.go crypto/tls: add Error method to alert 2011-10-27 19:42:32 -07:00
cipher_suites.go crypto/tls: don't select TLS 1.2 cipher suites in prior versions. 2013-09-26 17:09:56 -04:00
common.go crypto/tls: document that the package supports TLS 1.2 2013-09-23 16:05:23 -04:00
conn_test.go crypto/tls: add server side SNI support. 2011-10-08 10:06:53 -04:00
conn.go crypto/tls: support AES-GCM. 2013-08-29 17:18:59 -04:00
generate_cert.go crypto/tls: Change TLS version to 1.1 in the package comment. 2013-06-27 11:23:55 -07:00
handshake_client_test.go crypto/tls: fix TLS 1.2 client certificates. 2013-09-16 16:39:42 -04:00
handshake_client.go crypto/tls: don't select TLS 1.2 cipher suites in prior versions. 2013-09-26 17:09:56 -04:00
handshake_messages_test.go crypto/tls: implement TLS 1.2. 2013-07-02 19:58:56 -04:00
handshake_messages.go crypto/tls: implement TLS 1.2. 2013-07-02 19:58:56 -04:00
handshake_server_test.go crypto/tls: don't select TLS 1.2 cipher suites in prior versions. 2013-09-26 17:09:56 -04:00
handshake_server.go crypto/tls: don't select TLS 1.2 cipher suites in prior versions. 2013-09-26 17:09:56 -04:00
key_agreement.go crypto/tls: Add support for ECDHE-ECDSA 2013-07-17 12:33:16 -04:00
prf_test.go crypto/tls: support TLS 1.1. 2013-06-04 20:02:22 -04:00
prf.go crypto/tls: fix TLS 1.2 client certificates. 2013-09-16 16:39:42 -04:00
ticket.go crypto/tls: support session ticket resumption. 2012-09-24 16:52:43 -04:00
tls_test.go crypto/tls: fix loading keys labeled just "PRIVATE KEY" 2012-12-01 11:02:08 -08:00
tls.go crypto/tls: document that the package supports TLS 1.2 2013-09-23 16:05:23 -04:00