tls-tris

Adam Langley 1b8b6efd10 crypto/tls: reject zero-length SCTs. The SignedCertificateTimestampList[1] specifies that both the list and each element must not be empty. Checking that the list is not empty was handled in [2] and this change checks that the SCTs themselves are not zero-length. [1] https://tools.ietf.org/html/rfc6962#section-3.3 [2] https://golang.org/cl/33265 Change-Id: Iabaae7a15f6d111eb079e5086e0bd2005fae9e48 Reviewed-on: https://go-review.googlesource.com/33355 Run-TryBot: Adam Langley <agl@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>		8 anni fa
testdata	crypto/tls: enable ChaCha20-Poly1305 cipher suites by default.	8 anni fa
alert.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	8 anni fa
cipher_suites.go	crypto/tls: enable ChaCha20-Poly1305 cipher suites by default.	8 anni fa
common.go	crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present.	8 anni fa
conn.go	all: spell "marshal" and "unmarshal" consistently	8 anni fa
conn_test.go	crypto/tls: implement countermeasures against CBC padding oracles	8 anni fa
example_test.go	crypto/tls: add example for Config KeyLogWriter	8 anni fa
generate_cert.go	crypto/tls: Support ECDSA keys in generate_cert.go	10 anni fa
handshake_client.go	cmd/gofmt, crypto/tls: fix typos	8 anni fa
handshake_client_test.go	cmd/gofmt, crypto/tls: fix typos	8 anni fa
handshake_messages.go	crypto/tls: reject zero-length SCTs.	8 anni fa
handshake_messages_test.go	crypto/tls: reject zero-length SCTs.	8 anni fa
handshake_server.go	crypto/tls: add a SignatureScheme type.	8 anni fa
handshake_server_test.go	all: don't call t.Fatal from a goroutine	8 anni fa
handshake_test.go	crypto/tls: switch to OpenSSL 1.1.0 for test data.	8 anni fa
key_agreement.go	crypto/tls: support X25519.	8 anni fa
prf.go	all: standardize RFC mention format	8 anni fa
prf_test.go	crypto/tls: decouple handshake signatures from the handshake hash.	9 anni fa
ticket.go	crypto/tls: minor refactors for readability	8 anni fa
tls.go	crypto/tls: add Config.Clone	8 anni fa
tls_test.go	all: don't call t.Fatal from a goroutine	8 anni fa