kris
/
tls-tris
1
0
Форк 0
Код Проблеми 0 Запити на злиття 0 Релізи 0 Вікі Активність
Ви не можете вибрати більше 25 тем Теми мають розпочинатися з літери або цифри, можуть містити дефіси (-) і не повинні перевищувати 35 символів.
297 Коміти
4 Гілки
2.5 MiB
Дерево: 318ec0c21a
Гілки Теги
${ item.name }
Створити гілку ${ searchTerm }
з '318ec0c21a'
${ noResults }
tls-tris/testdata/Server-TLSv12-IssueTicket

Server-TLSv12-IssueTicket 6.1 KiB
Неформатований Звичайний вигляд Історія

crypto/tls: rework reference tests. The practice of storing reference connections for testing has worked reasonably well, but the large blocks of literal data in the .go files is ugly and updating the tests is a real problem because their number has grown. This CL changes the way that reference tests work. It's now possible to automatically update the tests and the test data is now stored in testdata/. This should make it easier to implement changes that affect all connections, like implementing the renegotiation extension. R=golang-codereviews, r CC=golang-codereviews https://golang.org/cl/42060044
10 роки тому
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
8 роки тому
​
​
​
​
​
​
crypto/tls: rework reference tests. The practice of storing reference connections for testing has worked reasonably well, but the large blocks of literal data in the .go files is ugly and updating the tests is a real problem because their number has grown. This CL changes the way that reference tests work. It's now possible to automatically update the tests and the test data is now stored in testdata/. This should make it easier to implement changes that affect all connections, like implementing the renegotiation extension. R=golang-codereviews, r CC=golang-codereviews https://golang.org/cl/42060044
10 роки тому
crypto/tls: support renegotiation extension. The renegotiation extension was introduced[1] due to an attack by Ray in which a client's handshake was spliced into a connection that was renegotiating, thus giving an attacker the ability to inject an arbitary prefix into the connection. Go has never supported renegotiation as a server and so this attack doesn't apply. As a client, it's possible that at some point in the future the population of servers will be sufficiently updated that it'll be possible to reject connections where the server hasn't demonstrated that it has been updated to address this problem. We're not at that point yet, but it's good for Go servers to support the extension so that it might be possible to do in the future. [1] https://tools.ietf.org/search/rfc5746 R=golang-codereviews, mikioh.mikioh CC=golang-codereviews https://golang.org/cl/48580043
10 роки тому
crypto/tls: rework reference tests. The practice of storing reference connections for testing has worked reasonably well, but the large blocks of literal data in the .go files is ugly and updating the tests is a real problem because their number has grown. This CL changes the way that reference tests work. It's now possible to automatically update the tests and the test data is now stored in testdata/. This should make it easier to implement changes that affect all connections, like implementing the renegotiation extension. R=golang-codereviews, r CC=golang-codereviews https://golang.org/cl/42060044
10 роки тому
​
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
8 роки тому
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
crypto/tls: rework reference tests. The practice of storing reference connections for testing has worked reasonably well, but the large blocks of literal data in the .go files is ugly and updating the tests is a real problem because their number has grown. This CL changes the way that reference tests work. It's now possible to automatically update the tests and the test data is now stored in testdata/. This should make it easier to implement changes that affect all connections, like implementing the renegotiation extension. R=golang-codereviews, r CC=golang-codereviews https://golang.org/cl/42060044
10 роки тому
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
8 роки тому
​
​
​
​
​
​
​
​
​
​
​
crypto/tls: rework reference tests. The practice of storing reference connections for testing has worked reasonably well, but the large blocks of literal data in the .go files is ugly and updating the tests is a real problem because their number has grown. This CL changes the way that reference tests work. It's now possible to automatically update the tests and the test data is now stored in testdata/. This should make it easier to implement changes that affect all connections, like implementing the renegotiation extension. R=golang-codereviews, r CC=golang-codereviews https://golang.org/cl/42060044
10 роки тому
crypto/tls: add support for session ticket key rotation This change adds a new method to tls.Config, SetSessionTicketKeys, that changes the key used to encrypt session tickets while the server is running. Additional keys may be provided that will be used to maintain continuity while rotating keys. If a ticket encrypted with an old key is provided by the client, the server will resume the session and provide the client with a ticket encrypted using the new key. Fixes #9994 Change-Id: Idbc16b10ff39616109a51ed39a6fa208faad5b4e Reviewed-on: https://go-review.googlesource.com/9072 Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com> Reviewed-by: Adam Langley <agl@golang.org>
9 роки тому
​
​
crypto/x509: require a NULL parameters for RSA public keys. The RFC is clear that the Parameters in an AlgorithmIdentifer for an RSA public key must be NULL. BoringSSL enforces this so we have strong evidence that this is a widely compatible change. Embarrassingly enough, the major source of violations of this is us. Go used to get this correct in only one of two places. This was only fixed in 2013 (with 4874bc9b). That's why lots of test certificates are updated in this change. Fixes #16166. Change-Id: Ib9a4551349354c66e730d44eb8cee4ec402ea8ab Reviewed-on: https://go-review.googlesource.com/27312 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
8 роки тому
​
​
​
​
​
​
​
​
​
​
​
​
 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182 
  1. >>> Flow 1 (client to server)

  2. 00000000  16 03 01 00 5e 01 00 00  5a 03 03 68 17 74 7e d7  |....^...Z..h.t~.|

  3. 00000010  a0 41 aa c8 3f 90 c7 3e  b2 e4 91 23 9f b2 86 bb  |.A..?..>...#....|

  4. 00000020  95 6c b6 db c9 f4 f4 4a  6b ef 67 00 00 04 00 05  |.l.....Jk.g.....|

  5. 00000030  00 ff 01 00 00 2d 00 23  00 00 00 0d 00 20 00 1e  |.....-.#..... ..|

  6. 00000040  06 01 06 02 06 03 05 01  05 02 05 03 04 01 04 02  |................|

  7. 00000050  04 03 03 01 03 02 03 03  02 01 02 02 02 03 00 0f  |................|

  8. 00000060  00 01 01                                          |...|

  9. >>> Flow 2 (server to client)

  10. 00000000  16 03 03 00 35 02 00 00  31 03 03 00 00 00 00 00  |....5...1.......|

  11. 00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

  12. 00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 05 00 00  |................|

  13. 00000030  09 00 23 00 00 ff 01 00  01 00 16 03 03 02 59 0b  |..#...........Y.|

  14. 00000040  00 02 55 00 02 52 00 02  4f 30 82 02 4b 30 82 01  |..U..R..O0..K0..|

  15. 00000050  b4 a0 03 02 01 02 02 09  00 e8 f0 9d 3f e2 5b ea  |............?.[.|

  16. 00000060  a6 30 0d 06 09 2a 86 48  86 f7 0d 01 01 0b 05 00  |.0...*.H........|

  17. 00000070  30 1f 31 0b 30 09 06 03  55 04 0a 13 02 47 6f 31  |0.1.0...U....Go1|

  18. 00000080  10 30 0e 06 03 55 04 03  13 07 47 6f 20 52 6f 6f  |.0...U....Go Roo|

  19. 00000090  74 30 1e 17 0d 31 36 30  31 30 31 30 30 30 30 30  |t0...16010100000|

  20. 000000a0  30 5a 17 0d 32 35 30 31  30 31 30 30 30 30 30 30  |0Z..250101000000|

  21. 000000b0  5a 30 1a 31 0b 30 09 06  03 55 04 0a 13 02 47 6f  |Z0.1.0...U....Go|

  22. 000000c0  31 0b 30 09 06 03 55 04  03 13 02 47 6f 30 81 9f  |1.0...U....Go0..|

  23. 000000d0  30 0d 06 09 2a 86 48 86  f7 0d 01 01 01 05 00 03  |0...*.H.........|

  24. 000000e0  81 8d 00 30 81 89 02 81  81 00 db 46 7d 93 2e 12  |...0.......F}...|

  25. 000000f0  27 06 48 bc 06 28 21 ab  7e c4 b6 a2 5d fe 1e 52  |'.H..(!.~...]..R|

  26. 00000100  45 88 7a 36 47 a5 08 0d  92 42 5b c2 81 c0 be 97  |E.z6G....B[.....|

  27. 00000110  79 98 40 fb 4f 6d 14 fd  2b 13 8b c2 a5 2e 67 d8  |y.@.Om..+.....g.|

  28. 00000120  d4 09 9e d6 22 38 b7 4a  0b 74 73 2b c2 34 f1 d1  |...."8.J.ts+.4..|

  29. 00000130  93 e5 96 d9 74 7b f3 58  9f 6c 61 3c c0 b0 41 d4  |....t{.X.la<..A.|

  30. 00000140  d9 2b 2b 24 23 77 5b 1c  3b bd 75 5d ce 20 54 cf  |.++$#w[.;.u]. T.|

  31. 00000150  a1 63 87 1d 1e 24 c4 f3  1d 1a 50 8b aa b6 14 43  |.c...$....P....C|

  32. 00000160  ed 97 a7 75 62 f4 14 c8  52 d7 02 03 01 00 01 a3  |...ub...R.......|

  33. 00000170  81 93 30 81 90 30 0e 06  03 55 1d 0f 01 01 ff 04  |..0..0...U......|

  34. 00000180  04 03 02 05 a0 30 1d 06  03 55 1d 25 04 16 30 14  |.....0...U.%..0.|

  35. 00000190  06 08 2b 06 01 05 05 07  03 01 06 08 2b 06 01 05  |..+.........+...|

  36. 000001a0  05 07 03 02 30 0c 06 03  55 1d 13 01 01 ff 04 02  |....0...U.......|

  37. 000001b0  30 00 30 19 06 03 55 1d  0e 04 12 04 10 9f 91 16  |0.0...U.........|

  38. 000001c0  1f 43 43 3e 49 a6 de 6d  b6 80 d7 9f 60 30 1b 06  |.CC>I..m....`0..|

  39. 000001d0  03 55 1d 23 04 14 30 12  80 10 48 13 49 4d 13 7e  |.U.#..0...H.IM.~|

  40. 000001e0  16 31 bb a3 01 d5 ac ab  6e 7b 30 19 06 03 55 1d  |.1......n{0...U.|

  41. 000001f0  11 04 12 30 10 82 0e 65  78 61 6d 70 6c 65 2e 67  |...0...example.g|

  42. 00000200  6f 6c 61 6e 67 30 0d 06  09 2a 86 48 86 f7 0d 01  |olang0...*.H....|

  43. 00000210  01 0b 05 00 03 81 81 00  9d 30 cc 40 2b 5b 50 a0  |.........0.@+[P.|

  44. 00000220  61 cb ba e5 53 58 e1 ed  83 28 a9 58 1a a9 38 a4  |a...SX...(.X..8.|

  45. 00000230  95 a1 ac 31 5a 1a 84 66  3d 43 d3 2d d9 0b f2 97  |...1Z..f=C.-....|

  46. 00000240  df d3 20 64 38 92 24 3a  00 bc cf 9c 7d b7 40 20  |.. d8.$:....}.@ |

  47. 00000250  01 5f aa d3 16 61 09 a2  76 fd 13 c3 cc e1 0c 5c  |._...a..v......\|

  48. 00000260  ee b1 87 82 f1 6c 04 ed  73 bb b3 43 77 8d 0c 1c  |.....l..s..Cw...|

  49. 00000270  f1 0f a1 d8 40 83 61 c9  4c 72 2b 9d ae db 46 06  |....@.a.Lr+...F.|

  50. 00000280  06 4d f4 c1 b3 3e c0 d1  bd 42 d4 db fe 3d 13 60  |.M...>...B...=.`|

  51. 00000290  84 5c 21 d3 3b e9 fa e7  16 03 03 00 04 0e 00 00  |.\!.;...........|

  52. 000002a0  00                                                |.|

  53. >>> Flow 3 (client to server)

  54. 00000000  16 03 03 00 86 10 00 00  82 00 80 6d a2 f8 29 04  |...........m..).|

  55. 00000010  65 50 e9 db 02 c9 c7 27  f9 4f fb 74 97 1a 1b cd  |eP.....'.O.t....|

  56. 00000020  c7 fa 70 47 d4 d2 2d 24  28 c3 5c 00 69 48 5c ac  |..pG..-$(.\.iH\.|

  57. 00000030  46 09 74 34 e1 88 d3 b0  11 2a 8c 6b 7a ba 13 21  |F.t4.....*.kz..!|

  58. 00000040  c1 22 8d 02 3d a8 12 57  cb 10 10 98 1c 7e 87 42  |."..=..W.....~.B|

  59. 00000050  69 b9 61 e6 ad 5f 45 c8  19 83 e2 36 a6 73 b0 71  |i.a.._E....6.s.q|

  60. 00000060  f3 b2 68 90 0b 26 b9 12  40 70 f7 bf 9a fb 03 27  |..h..&..@p.....'|

  61. 00000070  d2 84 a0 1b 4c 38 5f 3e  cc 86 10 a0 d1 74 75 77  |....L8_>.....tuw|

  62. 00000080  6a c6 f9 98 f7 fa 31 d1  0a 80 39 14 03 03 00 01  |j.....1...9.....|

  63. 00000090  01 16 03 03 00 24 18 94  26 51 b2 b1 ad a3 7c a1  |.....$..&Q....|.|

  64. 000000a0  d2 8d 7e c8 40 4a 3e 77  ac a6 86 fc 30 f0 b6 9a  |..~.@J>w....0...|

  65. 000000b0  c9 3a 7b 48 95 57 9d c0  f9 d8                    |.:{H.W....|

  66. >>> Flow 4 (server to client)

  67. 00000000  16 03 03 00 82 04 00 00  7e 00 00 00 00 00 78 50  |........~.....xP|

  68. 00000010  46 ad c1 db a8 38 86 7b  2b bb fd d0 c3 42 3e 00  |F....8.{+....B>.|

  69. 00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 94  |................|

  70. 00000030  6f 2c b5 83 61 78 0b 52  39 31 36 f7 0c 5e 27 d3  |o,..ax.R916..^'.|

  71. 00000040  76 9b c2 af 4e df 30 cb  1d c9 04 ee d2 02 31 f6  |v...N.0.......1.|

  72. 00000050  33 bc 59 0d 24 61 3c 23  7a 92 ad 16 20 88 1c 5f  |3.Y.$a<#z... .._|

  73. 00000060  20 32 38 fc 30 33 94 39  48 29 9e 70 41 ea 58 cd  | 28.03.9H).pA.X.|

  74. 00000070  66 02 d9 b7 7c 71 1a ad  67 7f 87 a6 4e 3a b7 be  |f...|q..g...N:..|

  75. 00000080  ff 59 39 58 bf 96 4d 14  03 03 00 01 01 16 03 03  |.Y9X..M.........|

  76. 00000090  00 24 4f 0f f5 bb 09 37  7a 99 29 80 bf ed b5 f7  |.$O....7z.).....|

  77. 000000a0  7e 27 00 11 05 df 79 67  24 4f 31 0c 69 dd fb 4c  |~'....yg$O1.i..L|

  78. 000000b0  b4 a1 5d 13 2e 39 17 03  03 00 21 82 3d a3 7d d0  |..]..9....!.=.}.|

  79. 000000c0  37 cb f8 84 0c 0a a1 1e  9e 80 d5 bd ab a2 b9 bd  |7...............|

  80. 000000d0  8c 66 df 29 64 f4 ae 7c  52 a1 8c 9f 15 03 03 00  |.f.)d..|R.......|

  81. 000000e0  16 e8 75 5e 4e 5b 72 15  01 42 38 a4 fb 61 86 cc  |..u^N[r..B8..a..|

  82. 000000f0  85 65 96 fb 86 11 a7                              |.e.....|