kris/th5: Alternative TLS implementation in Go - th5

Alternative TLS implementation in Go

Adam Langley 65c5bd0dd6 crypto/tls: don't require an explicit client-auth EKU. Previously we enforced both that the extended key usages of a client certificate chain allowed for client authentication, and that the client-auth EKU was in the leaf certificate. This change removes the latter requirement. It's still the case that the chain must be compatible with the client-auth EKU (i.e. that a parent certificate isn't limited to another usage, like S/MIME), but we'll now accept a leaf certificate with no EKUs for client-auth. While it would be nice if all client certificates were explicit in their intended purpose, I no longer feel that this battle is worthwhile. Fixes #11087. Change-Id: I777e695101cbeba069b730163533e2977f4dc1fc Reviewed-on: https://go-review.googlesource.com/10806 Reviewed-by: Andrew Gerrand <adg@golang.org> Run-TryBot: Adam Langley <agl@golang.org>		9 년 전
testdata	crypto/tls: update the supported signature algorithms.	9 년 전
alert.go	crypto/tls: support TLS_FALLBACK_SCSV as a server.	10 년 전
cipher_suites.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
common.go	crypto/tls: update the supported signature algorithms.	9 년 전
conn.go	crypto/tls: add OCSP response to ConnectionState	9 년 전
conn_test.go	crypto/tls: Added dynamic alternative to NameToCertificate map for SNI	10 년 전
example_test.go	crypto/x509: add example of using a custom root list.	10 년 전
generate_cert.go	crypto/tls: Support ECDSA keys in generate_cert.go	10 년 전
handshake_client.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
handshake_client_test.go	crypto/tls: add support for session ticket key rotation	9 년 전
handshake_messages.go	crypto/tls: add support for Certificate Transparency	9 년 전
handshake_messages_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
handshake_server.go	crypto/tls: don't require an explicit client-auth EKU.	9 년 전
handshake_server_test.go	crypto/tls: call GetCertificate if Certificates is empty.	9 년 전
handshake_test.go	crypto/tls: rework reference tests.	10 년 전
key_agreement.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
prf.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
prf_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 년 전
ticket.go	crypto/tls: add support for session ticket key rotation	9 년 전
tls.go	crypto/tls: remove return parameter stutter	9 년 전
tls_test.go	crypto/tls: implement tls-unique channel binding (RFC 5929 section 3).	10 년 전