yuhan6665
5f5c7a1144
crypto/tls: remove the tlsunsafeekm GODEBUG setting
...
Updates #75316
Change-Id: I2efa3e485653f5b403d92e5d99959e356a6a6964
Reviewed-on: https://go-review.googlesource.com/c/go/+/777380
Reviewed-by: Roland Shoemaker <roland@golang.org >
Auto-Submit: Filippo Valsorda <filippo@golang.org >
Reviewed-by: David Chase <drchase@google.com >
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com >
2026-09-10 22:25:08 -04:00
yuhan6665
5dabb073f8
Sync upstream Go 1.27 ( #30 )
...
https://github.com/XTLS/REALITY/pull/30#issuecomment-5579024460
2026-09-10 01:18:53 +00:00
yuhan6665
6c71b461ee
crypto/internal/fips/tls12: implement TLS 1.2 KDF
...
For #69536
Change-Id: If2477c5249a7c7db45c1af05e715ae0b61e7d940
Reviewed-on: https://go-review.googlesource.com/c/go/+/626837
Reviewed-by: Roland Shoemaker <roland@golang.org >
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net >
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com >
Auto-Submit: Filippo Valsorda <filippo@golang.org >
Reviewed-by: Michael Knyszek <mknyszek@google.com >
Reviewed-by: Russ Cox <rsc@golang.org >
2025-05-04 22:15:27 -04:00
yuhan6665
4abbcfc426
crypto/tls: disable ExportKeyingMaterial without EMS
...
Fixes #43922
Change-Id: Idaad7daa6784807ae3a5e4d944e88e13d01fd0b2
Reviewed-on: https://go-review.googlesource.com/c/go/+/544155
Reviewed-by: Michael Knyszek <mknyszek@google.com >
Reviewed-by: Roland Shoemaker <roland@golang.org >
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com >
Auto-Submit: Filippo Valsorda <filippo@golang.org >
2024-09-09 11:32:16 -04:00
yuhan6665
14202975e0
crypto/tls: implement Extended Master Secret
...
All OpenSSL tests now test operation with EMS. To test a handshake
*without* EMS we need to pass -Options=-ExtendedMasterSecret which is
only available in OpenSSL 3.1, which breaks a number of other tests.
Updates #43922
Change-Id: Ib9ac79a1d03fab6bfba5fe9cd66689cff661cda7
Reviewed-on: https://go-review.googlesource.com/c/go/+/497376
Run-TryBot: Filippo Valsorda <filippo@golang.org >
TryBot-Result: Gopher Robot <gobot@golang.org >
Reviewed-by: Roland Shoemaker <roland@golang.org >
Auto-Submit: Filippo Valsorda <filippo@golang.org >
Reviewed-by: Ian Lance Taylor <iant@google.com >
Reviewed-by: Damien Neil <dneil@google.com >
2023-11-12 12:08:30 -05:00
RPRX
870716f6af
Sync upstream Go 1.20
...
Excluding `boring` or test files
2023-11-12 12:08:30 -05:00
RPRX
fb7fc93023
Prepare for REALITY protocol
2023-01-29 14:32:27 +00:00
RPRX
c3c05667a5
Package tls in Go 1.19.5
...
Excluding `boring` or test files
2023-01-29 14:31:01 +00:00
yuhan6665