Henry de Valence
d4b8398461
tris: fix typos
7 years ago
Tom Thorogood
f4a6690edc
crypto/tls: generate unique ticket_age_add for each ticket
#23 -- CLA ok -- re-author to me+google@tomthorogood.co.uk
7 years ago
Filippo Valsorda
7f449cbaa7
tris: add SessionTicketSealer
7 years ago
Filippo Valsorda
4f7b5988a3
crypto/tls: add ConnectionState.Unique0RTTToken
7 years ago
Filippo Valsorda
0d97989e0d
tris: move Commit to just before key share generation
In particular move it to after cipher suite negotiation and after
HelloRetryRequest check.
7 years ago
Brendan Mc
ed105dc308
crypto/tls: add SignedCertificateTimestamps and OCSPStaple to 1.3
7 years ago
Filippo Valsorda
9b94b65b7b
crypto/tls: send two session tickets to TLS 1.3 clients
7 years ago
Filippo Valsorda
740fc926aa
tris: add single line TLSDEBUG=short
7 years ago
Filippo Valsorda
c758567785
crypto/tls: detect unexpected leftover handshake data
There should be no data in the Handshake buffer on encryption state
changes (including implicit 1.3 transitions). Checking that also blocks
all Handshake messages fragmented across CCS.
BoGo: PartialClientFinishedWithClientHello
7 years ago
Filippo Valsorda
4191962f25
crypto/tls: use correct alerts
BoGo: Resume-Server-PSKBinderFirstExtension
BoGo: Resume-Server-ExtraPSKBinder
BoGo: Resume-Server-ExtraIdentityNoBinder
BoGo: Renegotiate-Server-Forbidden
BoGo: NoNullCompression
BoGo: TrailingMessageData-*
7 years ago
Filippo Valsorda
1bc19494f8
tris: tolerate NSS sending obfuscated_ticket_age as seconds
7 years ago
Filippo Valsorda
faefac5f1a
crypto/tls: stop ConfirmHandshake from locking on any Read
ConfirmHandshake should block on a Read until the handshakeConfirmed
state is reached, but past that it shouldn't.
7 years ago
Filippo Valsorda
341de96a61
crypto/tls: fix Conn.phase data races
Phase should only be accessed under in.Mutex. Handshake and all Read
operations obtain that lock. However, many functions checking for
handshakeRunning only obtain handshakeMutex: reintroduce
handshakeCompleted for them. ConnectionState and Close check for
handshakeConfirmed, introduce an atomic flag for them.
7 years ago
Filippo Valsorda
3e31621f57
crypto/tls: pick the first group the client sent a key share for
Fixes NCC-2016-002
7 years ago
Filippo Valsorda
5c4af70647
tris: drop QuietError
8 years ago
Filippo Valsorda
180bfdbd68
crypto/tls: finish the session ticket state checks
8 years ago
Filippo Valsorda
f8c15889af
crypto/tls: implement TLS 1.3 server 0-RTT
8 years ago
Filippo Valsorda
1117f76fcc
crypto/tls: return from Handshake before the Client Finished in 1.3
8 years ago
Filippo Valsorda
ee3048cfd2
crypto/tls: implement TLS 1.3 server PSK
8 years ago
Filippo Valsorda
6c3765bb15
tris: add error tracing with CH dumping
8 years ago
Filippo Valsorda
8052dc002f
tris: extend ConnectionInfo
8 years ago
Filippo Valsorda
4b0d17eca3
crypto/tls: implement TLS 1.3 minimal server
8 years ago