cde0e97e4c
The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
38 行
2.6 KiB
Plaintext
38 行
2.6 KiB
Plaintext
>>> Flow 1 (client to server)
|
|
00000000 16 03 01 00 f6 01 00 00 f2 03 03 8b 12 b3 05 ae |................|
|
|
00000010 94 e0 8d ee 48 92 1a bc cd c1 8b e6 e7 e7 6f 95 |....H.........o.|
|
|
00000020 70 81 84 38 e4 29 4e 15 43 5c 42 20 28 4e 1c 13 |p..8.)N.C\B (N..|
|
|
00000030 40 cb 3e ce b0 49 3a d4 95 9c 21 0d 05 29 9e b3 |@.>..I:...!..)..|
|
|
00000040 ef 8b 78 70 aa 3f 6f af 77 ed a6 84 00 04 00 05 |..xp.?o.w.......|
|
|
00000050 00 ff 01 00 00 a5 00 23 00 78 50 46 ad c1 db a8 |.......#.xPF....|
|
|
00000060 38 86 7b 2b bb fd d0 c3 42 3e 00 00 00 00 00 00 |8.{+....B>......|
|
|
00000070 00 00 00 00 00 00 00 00 00 00 94 6f 2c b5 83 61 |...........o,..a|
|
|
00000080 78 0b 52 39 31 36 f7 0c 5e 27 d3 76 9b c2 af 4e |x.R916..^'.v...N|
|
|
00000090 df 30 cb 1d c9 04 ee d2 02 31 f6 33 bc 59 0d 24 |.0.......1.3.Y.$|
|
|
000000a0 61 3c 23 7a 92 ad 16 20 88 1c 5f 20 32 38 fc 30 |a<#z... .._ 28.0|
|
|
000000b0 33 94 39 48 29 9e 70 41 ea 58 cd 66 02 d9 b7 7c |3.9H).pA.X.f...||
|
|
000000c0 71 1a ad 67 7f 87 a6 4e 3a b7 be ff 59 39 58 bf |q..g...N:...Y9X.|
|
|
000000d0 96 4d 00 0d 00 20 00 1e 06 01 06 02 06 03 05 01 |.M... ..........|
|
|
000000e0 05 02 05 03 04 01 04 02 04 03 03 01 03 02 03 03 |................|
|
|
000000f0 02 01 02 02 02 03 00 0f 00 01 01 |...........|
|
|
>>> Flow 2 (server to client)
|
|
00000000 16 03 03 00 51 02 00 00 4d 03 03 00 00 00 00 00 |....Q...M.......|
|
|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
|
|
00000020 00 00 00 00 00 00 00 00 00 00 00 20 28 4e 1c 13 |........... (N..|
|
|
00000030 40 cb 3e ce b0 49 3a d4 95 9c 21 0d 05 29 9e b3 |@.>..I:...!..)..|
|
|
00000040 ef 8b 78 70 aa 3f 6f af 77 ed a6 84 00 05 00 00 |..xp.?o.w.......|
|
|
00000050 05 ff 01 00 01 00 14 03 03 00 01 01 16 03 03 00 |................|
|
|
00000060 24 92 98 ff dd 93 ef 62 b5 55 9c 02 ce 61 5a 0e |$......b.U...aZ.|
|
|
00000070 43 66 0f 3f 57 32 f0 f3 96 a2 75 93 5d 8a c0 ab |Cf.?W2....u.]...|
|
|
00000080 ac 14 97 a1 45 |....E|
|
|
>>> Flow 3 (client to server)
|
|
00000000 14 03 03 00 01 01 16 03 03 00 24 ff bb 0d 2c c7 |..........$...,.|
|
|
00000010 ef d5 b0 c8 18 54 b0 7b d7 2e d4 b0 41 65 67 80 |.....T.{....Aeg.|
|
|
00000020 10 c4 11 ed 2c 28 b1 d6 4b 7f a6 66 70 f4 05 |....,(..K..fp..|
|
|
>>> Flow 4 (server to client)
|
|
00000000 17 03 03 00 21 97 5a 21 d6 cd 7e 16 77 2a ab ef |....!.Z!..~.w*..|
|
|
00000010 24 d1 32 5f d6 81 5e 6b 94 01 df e2 bb 64 b1 a8 |$.2_..^k.....d..|
|
|
00000020 3d aa fd a6 cd ef 15 03 03 00 16 d5 8e 4e 3c 62 |=............N<b|
|
|
00000030 2c 8f 2d a2 c4 e3 4e b0 b4 64 9f 02 f9 4b ca 10 |,.-...N..d...K..|
|
|
00000040 9d |.|
|