mirror of
https://github.com/golang/go
synced 2024-11-22 15:04:52 -07:00
[dev.boringcrypto] all: merge master into dev.boringcrypto
Change-Id: I61d6a6d4959fdea8339b9d666385bf6b4ed49d03
This commit is contained in:
commit
d85ef2b979
1
AUTHORS
1
AUTHORS
@ -563,6 +563,7 @@ Hitoshi Mitake <mitake.hitoshi@gmail.com>
|
||||
Holden Huang <ttyh061@gmail.com>
|
||||
Hong Ruiqi <hongruiqi@gmail.com>
|
||||
Hongfei Tan <feilengcui008@gmail.com>
|
||||
Hootsuite Inc.
|
||||
Hsin-Ho Yeh <yhh92u@gmail.com>
|
||||
Hu Keping <hukeping@huawei.com>
|
||||
Hugues Bruant <hugues.bruant@gmail.com>
|
||||
|
@ -1303,6 +1303,7 @@ Kshitij Saraogi <kshitijsaraogi@gmail.com>
|
||||
Kun Li <likunarmstrong@gmail.com>
|
||||
Kunpei Sakai <namusyaka@gmail.com>
|
||||
Kuntal Majumder <hellozee@disroot.org>
|
||||
Kush Patel <kush.patel@hootsuite.com>
|
||||
Kyle Consalus <consalus@gmail.com>
|
||||
Kyle Isom <kyle@gokyle.net>
|
||||
Kyle Jones <kyle@kyledj.com>
|
||||
|
@ -20,7 +20,7 @@ editing, navigation, testing, and debugging experience.
|
||||
|
||||
<ul>
|
||||
<li><a href="https://github.com/fatih/vim-go">vim</a>: vim-go plugin provides Go programming language support</li>
|
||||
<li><a href="https://marketplace.visualstudio.com/items?itemName=ms-vscode.Go">Visual Studio Code</a>:
|
||||
<li><a href="https://marketplace.visualstudio.com/items?itemName=golang.go">Visual Studio Code</a>:
|
||||
Go extension provides support for the Go programming language</li>
|
||||
<li><a href="https://www.jetbrains.com/go">GoLand</a>: GoLand is distributed either as a standalone IDE
|
||||
or as a plugin for IntelliJ IDEA Ultimate</li>
|
||||
|
@ -553,11 +553,11 @@ Do not send CLs removing the interior tags from such phrases.
|
||||
|
||||
<dl id="crypto/x509/pkix"><dt><a href="/pkg/crypto/x509/pkix/">crypto/x509/pkix</a></dt>
|
||||
<dd>
|
||||
<p><!-- CL 229864 -->
|
||||
<p><!-- CL 229864, CL 240543 -->
|
||||
<a href="/pkg/crypto/x509/pkix/#Name.String"><code>Name.String</code></a>
|
||||
now prints non-standard attributes from
|
||||
<a href="/pkg/crypto/x509/pkix/#Name.Names"><code>Names</code></a> if
|
||||
<a href="/pkg/crypto/x509/pkix/#Name.ExtraNames"><code>ExtraNames</code></a> is empty.
|
||||
<a href="/pkg/crypto/x509/pkix/#Name.ExtraNames"><code>ExtraNames</code></a> is nil.
|
||||
</p>
|
||||
</dd>
|
||||
</dl><!-- crypto/x509/pkix -->
|
||||
@ -666,6 +666,17 @@ Do not send CLs removing the interior tags from such phrases.
|
||||
</dd>
|
||||
</dl><!-- go/printer -->
|
||||
|
||||
<dl id="html/template"><dt><a href="/pkg/html/template/">html/template</a></dt>
|
||||
<dd>
|
||||
<p><!-- CL 226097 -->
|
||||
The package now uses Unicode escapes (<code>\uNNNN</code>) in all
|
||||
JavaScript and JSON contexts. This fixes escaping errors in
|
||||
<code>application/ld+json</code> and <code>application/json</code>
|
||||
contexts.
|
||||
</p>
|
||||
</dd>
|
||||
</dl><!-- html/template -->
|
||||
|
||||
<dl id="io/ioutil"><dt><a href="/pkg/io/ioutil/">io/ioutil</a></dt>
|
||||
<dd>
|
||||
<p><!-- CL 212597 -->
|
||||
@ -950,6 +961,16 @@ Do not send CLs removing the interior tags from such phrases.
|
||||
</dd>
|
||||
</dl><!-- testing -->
|
||||
|
||||
<dl id="text/template"><dt><a href="/pkg/text/template/">text/template</a></dt>
|
||||
<dd>
|
||||
<p><!-- CL 226097 -->
|
||||
<a href="/pkg/text/template/#JSEscape"><code>JSEscape</code></a> now
|
||||
consistently uses Unicode escapes (<code>\u00XX</code>), which are
|
||||
compatible with JSON.
|
||||
</p>
|
||||
</dd>
|
||||
</dl><!-- text/template -->
|
||||
|
||||
<dl id="time"><dt><a href="/pkg/time/">time</a></dt>
|
||||
<dd>
|
||||
<p><!-- CL 220424, CL 217362, golang.org/issue/33184 -->
|
||||
|
@ -164,7 +164,7 @@ type Signer interface {
|
||||
|
||||
// Sign signs digest with the private key, possibly using entropy from
|
||||
// rand. For an RSA key, the resulting signature should be either a
|
||||
// PKCS#1 v1.5 or PSS signature (as indicated by opts). For an (EC)DSA
|
||||
// PKCS #1 v1.5 or PSS signature (as indicated by opts). For an (EC)DSA
|
||||
// key, it should be a DER-serialised, ASN.1 signature structure.
|
||||
//
|
||||
// Hash implements the SignerOpts interface and, in most cases, one can
|
||||
|
@ -27,7 +27,7 @@ import (
|
||||
// exponentiation is larger than the modulus. (Otherwise it could be
|
||||
// decrypted with a square-root.)
|
||||
//
|
||||
// In these designs, when using PKCS#1 v1.5, it's vitally important to
|
||||
// In these designs, when using PKCS #1 v1.5, it's vitally important to
|
||||
// avoid disclosing whether the received RSA message was well-formed
|
||||
// (that is, whether the result of decrypting is a correctly padded
|
||||
// message) because this leaks secret information.
|
||||
|
@ -16,9 +16,9 @@ import (
|
||||
|
||||
import "crypto/internal/boring"
|
||||
|
||||
// This file implements encryption and decryption using PKCS#1 v1.5 padding.
|
||||
// This file implements encryption and decryption using PKCS #1 v1.5 padding.
|
||||
|
||||
// PKCS1v15DecrypterOpts is for passing options to PKCS#1 v1.5 decryption using
|
||||
// PKCS1v15DecrypterOpts is for passing options to PKCS #1 v1.5 decryption using
|
||||
// the crypto.Decrypter interface.
|
||||
type PKCS1v15DecryptOptions struct {
|
||||
// SessionKeyLen is the length of the session key that is being
|
||||
@ -29,7 +29,7 @@ type PKCS1v15DecryptOptions struct {
|
||||
}
|
||||
|
||||
// EncryptPKCS1v15 encrypts the given message with RSA and the padding
|
||||
// scheme from PKCS#1 v1.5. The message must be no longer than the
|
||||
// scheme from PKCS #1 v1.5. The message must be no longer than the
|
||||
// length of the public modulus minus 11 bytes.
|
||||
//
|
||||
// The rand parameter is used as a source of entropy to ensure that
|
||||
@ -83,7 +83,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
|
||||
return c.FillBytes(em), nil
|
||||
}
|
||||
|
||||
// DecryptPKCS1v15 decrypts a plaintext using RSA and the padding scheme from PKCS#1 v1.5.
|
||||
// DecryptPKCS1v15 decrypts a plaintext using RSA and the padding scheme from PKCS #1 v1.5.
|
||||
// If rand != nil, it uses RSA blinding to avoid timing side-channel attacks.
|
||||
//
|
||||
// Note that whether this function returns an error or not discloses secret
|
||||
@ -118,7 +118,7 @@ func DecryptPKCS1v15(rand io.Reader, priv *PrivateKey, ciphertext []byte) ([]byt
|
||||
return out[index:], nil
|
||||
}
|
||||
|
||||
// DecryptPKCS1v15SessionKey decrypts a session key using RSA and the padding scheme from PKCS#1 v1.5.
|
||||
// DecryptPKCS1v15SessionKey decrypts a session key using RSA and the padding scheme from PKCS #1 v1.5.
|
||||
// If rand != nil, it uses RSA blinding to avoid timing side-channel attacks.
|
||||
// It returns an error if the ciphertext is the wrong length or if the
|
||||
// ciphertext is greater than the public modulus. Otherwise, no error is
|
||||
@ -261,7 +261,7 @@ var hashPrefixes = map[crypto.Hash][]byte{
|
||||
}
|
||||
|
||||
// SignPKCS1v15 calculates the signature of hashed using
|
||||
// RSASSA-PKCS1-V1_5-SIGN from RSA PKCS#1 v1.5. Note that hashed must
|
||||
// RSASSA-PKCS1-V1_5-SIGN from RSA PKCS #1 v1.5. Note that hashed must
|
||||
// be the result of hashing the input message using the given hash
|
||||
// function. If hash is zero, hashed is signed directly. This isn't
|
||||
// advisable except for interoperability.
|
||||
@ -311,7 +311,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
|
||||
return c.FillBytes(em), nil
|
||||
}
|
||||
|
||||
// VerifyPKCS1v15 verifies an RSA PKCS#1 v1.5 signature.
|
||||
// VerifyPKCS1v15 verifies an RSA PKCS #1 v1.5 signature.
|
||||
// hashed is the result of hashing the input message using the given hash
|
||||
// function and sig is the signature. A valid signature is indicated by
|
||||
// returning a nil error. If hash is zero then hashed is used directly. This
|
||||
|
@ -2,14 +2,14 @@
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
// Package rsa implements RSA encryption as specified in PKCS#1 and RFC 8017.
|
||||
// Package rsa implements RSA encryption as specified in PKCS #1 and RFC 8017.
|
||||
//
|
||||
// RSA is a single, fundamental operation that is used in this package to
|
||||
// implement either public-key encryption or public-key signatures.
|
||||
//
|
||||
// The original specification for encryption and signatures with RSA is PKCS#1
|
||||
// The original specification for encryption and signatures with RSA is PKCS #1
|
||||
// and the terms "RSA encryption" and "RSA signatures" by default refer to
|
||||
// PKCS#1 version 1.5. However, that specification has flaws and new designs
|
||||
// PKCS #1 version 1.5. However, that specification has flaws and new designs
|
||||
// should use version 2, usually called by just OAEP and PSS, where
|
||||
// possible.
|
||||
//
|
||||
@ -143,7 +143,7 @@ func (priv *PrivateKey) Equal(x crypto.PrivateKey) bool {
|
||||
}
|
||||
|
||||
// Sign signs digest with priv, reading randomness from rand. If opts is a
|
||||
// *PSSOptions then the PSS algorithm will be used, otherwise PKCS#1 v1.5 will
|
||||
// *PSSOptions then the PSS algorithm will be used, otherwise PKCS #1 v1.5 will
|
||||
// be used. digest must be the result of hashing the input message using
|
||||
// opts.HashFunc().
|
||||
//
|
||||
@ -159,7 +159,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
|
||||
}
|
||||
|
||||
// Decrypt decrypts ciphertext with priv. If opts is nil or of type
|
||||
// *PKCS1v15DecryptOptions then PKCS#1 v1.5 decryption is performed. Otherwise
|
||||
// *PKCS1v15DecryptOptions then PKCS #1 v1.5 decryption is performed. Otherwise
|
||||
// opts must have type *OAEPOptions and OAEP decryption is done.
|
||||
func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error) {
|
||||
if opts == nil {
|
||||
@ -195,7 +195,7 @@ type PrecomputedValues struct {
|
||||
|
||||
// CRTValues is used for the 3rd and subsequent primes. Due to a
|
||||
// historical accident, the CRT for the first two primes is handled
|
||||
// differently in PKCS#1 and interoperability is sufficiently
|
||||
// differently in PKCS #1 and interoperability is sufficiently
|
||||
// important that we mirror this.
|
||||
CRTValues []CRTValue
|
||||
}
|
||||
@ -395,7 +395,7 @@ func incCounter(c *[4]byte) {
|
||||
}
|
||||
|
||||
// mgf1XOR XORs the bytes in out with a mask generated using the MGF1 function
|
||||
// specified in PKCS#1 v2.1.
|
||||
// specified in PKCS #1 v2.1.
|
||||
func mgf1XOR(out []byte, hash hash.Hash, seed []byte) {
|
||||
var counter [4]byte
|
||||
var digest []byte
|
||||
|
@ -155,9 +155,9 @@ var rsaSignatureSchemes = []struct {
|
||||
{PSSWithSHA256, crypto.SHA256.Size()*2 + 2, VersionTLS13},
|
||||
{PSSWithSHA384, crypto.SHA384.Size()*2 + 2, VersionTLS13},
|
||||
{PSSWithSHA512, crypto.SHA512.Size()*2 + 2, VersionTLS13},
|
||||
// PKCS#1 v1.5 uses prefixes from hashPrefixes in crypto/rsa, and requires
|
||||
// PKCS #1 v1.5 uses prefixes from hashPrefixes in crypto/rsa, and requires
|
||||
// emLen >= len(prefix) + hLen + 11
|
||||
// TLS 1.3 dropped support for PKCS#1 v1.5 in favor of RSA-PSS.
|
||||
// TLS 1.3 dropped support for PKCS #1 v1.5 in favor of RSA-PSS.
|
||||
{PKCS1WithSHA256, 19 + crypto.SHA256.Size() + 11, VersionTLS12},
|
||||
{PKCS1WithSHA384, 19 + crypto.SHA384.Size() + 11, VersionTLS12},
|
||||
{PKCS1WithSHA512, 19 + crypto.SHA512.Size() + 11, VersionTLS12},
|
||||
|
@ -600,12 +600,12 @@ type Config struct {
|
||||
// by the policy in ClientAuth.
|
||||
ClientCAs *x509.CertPool
|
||||
|
||||
// InsecureSkipVerify controls whether a client verifies the
|
||||
// server's certificate chain and host name.
|
||||
// If InsecureSkipVerify is true, TLS accepts any certificate
|
||||
// presented by the server and any host name in that certificate.
|
||||
// In this mode, TLS is susceptible to machine-in-the-middle attacks.
|
||||
// This should be used only for testing.
|
||||
// InsecureSkipVerify controls whether a client verifies the server's
|
||||
// certificate chain and host name. If InsecureSkipVerify is true, crypto/tls
|
||||
// accepts any certificate presented by the server and any host name in that
|
||||
// certificate. In this mode, TLS is susceptible to machine-in-the-middle
|
||||
// attacks unless custom verification is used. This should be used only for
|
||||
// testing or in combination with VerifyConnection or VerifyPeerCertificate.
|
||||
InsecureSkipVerify bool
|
||||
|
||||
// CipherSuites is a list of supported cipher suites for TLS versions up to
|
||||
|
@ -40,7 +40,7 @@ func (ka rsaKeyAgreement) processClientKeyExchange(config *Config, cert *Certifi
|
||||
if !ok {
|
||||
return nil, errors.New("tls: certificate private key does not implement crypto.Decrypter")
|
||||
}
|
||||
// Perform constant time RSA PKCS#1 v1.5 decryption
|
||||
// Perform constant time RSA PKCS #1 v1.5 decryption
|
||||
preMasterSecret, err := priv.Decrypt(config.rand(), ciphertext, &rsa.PKCS1v15DecryptOptions{SessionKeyLen: 48})
|
||||
if err != nil {
|
||||
return nil, err
|
||||
|
@ -365,7 +365,7 @@ func X509KeyPair(certPEMBlock, keyPEMBlock []byte) (Certificate, error) {
|
||||
}
|
||||
|
||||
// Attempt to parse the given private key DER block. OpenSSL 0.9.8 generates
|
||||
// PKCS#1 private keys by default, while OpenSSL 1.0.0 generates PKCS#8 keys.
|
||||
// PKCS #1 private keys by default, while OpenSSL 1.0.0 generates PKCS #8 keys.
|
||||
// OpenSSL ecparam generates SEC1 EC private keys for ECDSA. We try all three.
|
||||
func parsePrivateKey(der []byte) (crypto.PrivateKey, error) {
|
||||
if key, err := x509.ParsePKCS1PrivateKey(der); err == nil {
|
||||
|
@ -1443,7 +1443,7 @@ func (s brokenSigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts
|
||||
}
|
||||
|
||||
// TestPKCS1OnlyCert uses a client certificate with a broken crypto.Signer that
|
||||
// always makes PKCS#1 v1.5 signatures, so can't be used with RSA-PSS.
|
||||
// always makes PKCS #1 v1.5 signatures, so can't be used with RSA-PSS.
|
||||
func TestPKCS1OnlyCert(t *testing.T) {
|
||||
clientConfig := testConfig.Clone()
|
||||
clientConfig.Certificates = []Certificate{{
|
||||
@ -1451,7 +1451,7 @@ func TestPKCS1OnlyCert(t *testing.T) {
|
||||
PrivateKey: brokenSigner{testRSAPrivateKey},
|
||||
}}
|
||||
serverConfig := testConfig.Clone()
|
||||
serverConfig.MaxVersion = VersionTLS12 // TLS 1.3 doesn't support PKCS#1 v1.5
|
||||
serverConfig.MaxVersion = VersionTLS12 // TLS 1.3 doesn't support PKCS #1 v1.5
|
||||
serverConfig.ClientAuth = RequireAnyClientCert
|
||||
|
||||
// If RSA-PSS is selected, the handshake should fail.
|
||||
|
@ -11,7 +11,7 @@ import (
|
||||
"math/big"
|
||||
)
|
||||
|
||||
// pkcs1PrivateKey is a structure which mirrors the PKCS#1 ASN.1 for an RSA private key.
|
||||
// pkcs1PrivateKey is a structure which mirrors the PKCS #1 ASN.1 for an RSA private key.
|
||||
type pkcs1PrivateKey struct {
|
||||
Version int
|
||||
N *big.Int
|
||||
@ -35,13 +35,13 @@ type pkcs1AdditionalRSAPrime struct {
|
||||
Coeff *big.Int
|
||||
}
|
||||
|
||||
// pkcs1PublicKey reflects the ASN.1 structure of a PKCS#1 public key.
|
||||
// pkcs1PublicKey reflects the ASN.1 structure of a PKCS #1 public key.
|
||||
type pkcs1PublicKey struct {
|
||||
N *big.Int
|
||||
E int
|
||||
}
|
||||
|
||||
// ParsePKCS1PrivateKey parses an RSA private key in PKCS#1, ASN.1 DER form.
|
||||
// ParsePKCS1PrivateKey parses an RSA private key in PKCS #1, ASN.1 DER form.
|
||||
//
|
||||
// This kind of key is commonly encoded in PEM blocks of type "RSA PRIVATE KEY".
|
||||
func ParsePKCS1PrivateKey(der []byte) (*rsa.PrivateKey, error) {
|
||||
@ -96,7 +96,7 @@ func ParsePKCS1PrivateKey(der []byte) (*rsa.PrivateKey, error) {
|
||||
return key, nil
|
||||
}
|
||||
|
||||
// MarshalPKCS1PrivateKey converts an RSA private key to PKCS#1, ASN.1 DER form.
|
||||
// MarshalPKCS1PrivateKey converts an RSA private key to PKCS #1, ASN.1 DER form.
|
||||
//
|
||||
// This kind of key is commonly encoded in PEM blocks of type "RSA PRIVATE KEY".
|
||||
// For a more flexible key format which is not RSA specific, use
|
||||
@ -132,7 +132,7 @@ func MarshalPKCS1PrivateKey(key *rsa.PrivateKey) []byte {
|
||||
return b
|
||||
}
|
||||
|
||||
// ParsePKCS1PublicKey parses an RSA public key in PKCS#1, ASN.1 DER form.
|
||||
// ParsePKCS1PublicKey parses an RSA public key in PKCS #1, ASN.1 DER form.
|
||||
//
|
||||
// This kind of key is commonly encoded in PEM blocks of type "RSA PUBLIC KEY".
|
||||
func ParsePKCS1PublicKey(der []byte) (*rsa.PublicKey, error) {
|
||||
@ -161,7 +161,7 @@ func ParsePKCS1PublicKey(der []byte) (*rsa.PublicKey, error) {
|
||||
}, nil
|
||||
}
|
||||
|
||||
// MarshalPKCS1PublicKey converts an RSA public key to PKCS#1, ASN.1 DER form.
|
||||
// MarshalPKCS1PublicKey converts an RSA public key to PKCS #1, ASN.1 DER form.
|
||||
//
|
||||
// This kind of key is commonly encoded in PEM blocks of type "RSA PUBLIC KEY".
|
||||
func MarshalPKCS1PublicKey(key *rsa.PublicKey) []byte {
|
||||
|
@ -14,7 +14,7 @@ import (
|
||||
"fmt"
|
||||
)
|
||||
|
||||
// pkcs8 reflects an ASN.1, PKCS#8 PrivateKey. See
|
||||
// pkcs8 reflects an ASN.1, PKCS #8 PrivateKey. See
|
||||
// ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-8/pkcs-8v1_2.asn
|
||||
// and RFC 5208.
|
||||
type pkcs8 struct {
|
||||
@ -24,7 +24,7 @@ type pkcs8 struct {
|
||||
// optional attributes omitted.
|
||||
}
|
||||
|
||||
// ParsePKCS8PrivateKey parses an unencrypted private key in PKCS#8, ASN.1 DER form.
|
||||
// ParsePKCS8PrivateKey parses an unencrypted private key in PKCS #8, ASN.1 DER form.
|
||||
//
|
||||
// It returns a *rsa.PrivateKey, a *ecdsa.PrivateKey, or a ed25519.PrivateKey.
|
||||
// More types might be supported in the future.
|
||||
@ -79,7 +79,7 @@ func ParsePKCS8PrivateKey(der []byte) (key interface{}, err error) {
|
||||
}
|
||||
}
|
||||
|
||||
// MarshalPKCS8PrivateKey converts a private key to PKCS#8, ASN.1 DER form.
|
||||
// MarshalPKCS8PrivateKey converts a private key to PKCS #8, ASN.1 DER form.
|
||||
//
|
||||
// The following key types are currently supported: *rsa.PrivateKey, *ecdsa.PrivateKey
|
||||
// and ed25519.PrivateKey. Unsupported key types result in an error.
|
||||
|
@ -247,20 +247,26 @@ func (n Name) ToRDNSequence() (ret RDNSequence) {
|
||||
// String returns the string form of n, roughly following
|
||||
// the RFC 2253 Distinguished Names syntax.
|
||||
func (n Name) String() string {
|
||||
if len(n.ExtraNames) == 0 {
|
||||
var rdns RDNSequence
|
||||
// If there are no ExtraNames, surface the parsed value (all entries in
|
||||
// Names) instead.
|
||||
if n.ExtraNames == nil {
|
||||
for _, atv := range n.Names {
|
||||
t := atv.Type
|
||||
if len(t) == 4 && t[0] == 2 && t[1] == 5 && t[2] == 4 {
|
||||
switch t[3] {
|
||||
case 3, 5, 6, 7, 8, 9, 10, 11, 17:
|
||||
// These attributes are already parsed into named fields.
|
||||
// These attributes were already parsed into named fields.
|
||||
continue
|
||||
}
|
||||
}
|
||||
n.ExtraNames = append(n.ExtraNames, atv)
|
||||
// Place non-standard parsed values at the beginning of the sequence
|
||||
// so they will be at the end of the string. See Issue 39924.
|
||||
rdns = append(rdns, []AttributeTypeAndValue{atv})
|
||||
}
|
||||
}
|
||||
return n.ToRDNSequence().String()
|
||||
rdns = append(rdns, n.ToRDNSequence()...)
|
||||
return rdns.String()
|
||||
}
|
||||
|
||||
// oidInAttributeTypeAndValue reports whether a type with the given OID exists
|
||||
|
@ -2349,7 +2349,7 @@ type certificateRequest struct {
|
||||
SignatureValue asn1.BitString
|
||||
}
|
||||
|
||||
// oidExtensionRequest is a PKCS#9 OBJECT IDENTIFIER that indicates requested
|
||||
// oidExtensionRequest is a PKCS #9 OBJECT IDENTIFIER that indicates requested
|
||||
// extensions in a CSR.
|
||||
var oidExtensionRequest = asn1.ObjectIdentifier{1, 2, 840, 113549, 1, 9, 14}
|
||||
|
||||
|
@ -2076,10 +2076,31 @@ func TestPKIXNameString(t *testing.T) {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
// Check that parsed non-standard attributes are printed.
|
||||
rdns := pkix.Name{
|
||||
Locality: []string{"Gophertown"},
|
||||
ExtraNames: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "golang.org"}},
|
||||
}.ToRDNSequence()
|
||||
nn := pkix.Name{}
|
||||
nn.FillFromRDNSequence(&rdns)
|
||||
|
||||
// Check that zero-length non-nil ExtraNames hide Names.
|
||||
extra := []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "backing array"}}
|
||||
extraNotNil := pkix.Name{
|
||||
Locality: []string{"Gophertown"},
|
||||
ExtraNames: extra[:0],
|
||||
Names: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "golang.org"}},
|
||||
}
|
||||
|
||||
tests := []struct {
|
||||
dn pkix.Name
|
||||
want string
|
||||
}{
|
||||
{nn, "L=Gophertown,1.2.3.4.5=#130a676f6c616e672e6f7267"},
|
||||
{extraNotNil, "L=Gophertown"},
|
||||
{pkix.Name{
|
||||
CommonName: "Steve Kille",
|
||||
Organization: []string{"Isode Limited"},
|
||||
@ -2108,6 +2129,20 @@ func TestPKIXNameString(t *testing.T) {
|
||||
ExtraNames: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "golang.org"}},
|
||||
}, "1.2.3.4.5=#130a676f6c616e672e6f7267,L=Gophertown"},
|
||||
// If there are no ExtraNames, the Names are printed instead.
|
||||
{pkix.Name{
|
||||
Locality: []string{"Gophertown"},
|
||||
Names: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "golang.org"}},
|
||||
}, "L=Gophertown,1.2.3.4.5=#130a676f6c616e672e6f7267"},
|
||||
// If there are both, print only the ExtraNames.
|
||||
{pkix.Name{
|
||||
Locality: []string{"Gophertown"},
|
||||
ExtraNames: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 5}), Value: "golang.org"}},
|
||||
Names: []pkix.AttributeTypeAndValue{
|
||||
{Type: asn1.ObjectIdentifier([]int{1, 2, 3, 4, 6}), Value: "example.com"}},
|
||||
}, "1.2.3.4.5=#130a676f6c616e672e6f7267,L=Gophertown"},
|
||||
}
|
||||
|
||||
for i, test := range tests {
|
||||
@ -2115,6 +2150,10 @@ func TestPKIXNameString(t *testing.T) {
|
||||
t.Errorf("#%d: String() = \n%s\n, want \n%s", i, got, test.want)
|
||||
}
|
||||
}
|
||||
|
||||
if extra[0].Value != "backing array" {
|
||||
t.Errorf("the backing array of an empty ExtraNames got modified by String")
|
||||
}
|
||||
}
|
||||
|
||||
func TestRDNSequenceString(t *testing.T) {
|
||||
|
@ -67,7 +67,7 @@ func parsePlan9Addr(s string) (ip IP, iport int, err error) {
|
||||
return addr, p, nil
|
||||
}
|
||||
|
||||
func readPlan9Addr(proto, filename string) (addr Addr, err error) {
|
||||
func readPlan9Addr(net, filename string) (addr Addr, err error) {
|
||||
var buf [128]byte
|
||||
|
||||
f, err := os.Open(filename)
|
||||
@ -83,13 +83,19 @@ func readPlan9Addr(proto, filename string) (addr Addr, err error) {
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
switch proto {
|
||||
case "tcp":
|
||||
switch net {
|
||||
case "tcp4", "udp4":
|
||||
if ip.Equal(IPv6zero) {
|
||||
ip = ip[:IPv4len]
|
||||
}
|
||||
}
|
||||
switch net {
|
||||
case "tcp", "tcp4", "tcp6":
|
||||
addr = &TCPAddr{IP: ip, Port: port}
|
||||
case "udp":
|
||||
case "udp", "udp4", "udp6":
|
||||
addr = &UDPAddr{IP: ip, Port: port}
|
||||
default:
|
||||
return nil, UnknownNetworkError(proto)
|
||||
return nil, UnknownNetworkError(net)
|
||||
}
|
||||
return addr, nil
|
||||
}
|
||||
@ -213,7 +219,7 @@ func dialPlan9Blocking(ctx context.Context, net string, laddr, raddr Addr) (fd *
|
||||
f.Close()
|
||||
return nil, err
|
||||
}
|
||||
laddr, err = readPlan9Addr(proto, netdir+"/"+proto+"/"+name+"/local")
|
||||
laddr, err = readPlan9Addr(net, netdir+"/"+proto+"/"+name+"/local")
|
||||
if err != nil {
|
||||
data.Close()
|
||||
f.Close()
|
||||
@ -233,7 +239,7 @@ func listenPlan9(ctx context.Context, net string, laddr Addr) (fd *netFD, err er
|
||||
f.Close()
|
||||
return nil, &OpError{Op: "announce", Net: net, Source: laddr, Addr: nil, Err: err}
|
||||
}
|
||||
laddr, err = readPlan9Addr(proto, netdir+"/"+proto+"/"+name+"/local")
|
||||
laddr, err = readPlan9Addr(net, netdir+"/"+proto+"/"+name+"/local")
|
||||
if err != nil {
|
||||
f.Close()
|
||||
return nil, err
|
||||
|
29
src/net/ipsock_plan9_test.go
Normal file
29
src/net/ipsock_plan9_test.go
Normal file
@ -0,0 +1,29 @@
|
||||
// Copyright 2020 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
package net
|
||||
|
||||
import "testing"
|
||||
|
||||
func TestTCP4ListenZero(t *testing.T) {
|
||||
l, err := Listen("tcp4", "0.0.0.0:0")
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
defer l.Close()
|
||||
if a := l.Addr(); isNotIPv4(a) {
|
||||
t.Errorf("address does not contain IPv4: %v", a)
|
||||
}
|
||||
}
|
||||
|
||||
func TestUDP4ListenZero(t *testing.T) {
|
||||
c, err := ListenPacket("udp4", "0.0.0.0:0")
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
defer c.Close()
|
||||
if a := c.LocalAddr(); isNotIPv4(a) {
|
||||
t.Errorf("address does not contain IPv4: %v", a)
|
||||
}
|
||||
}
|
Loading…
Reference in New Issue
Block a user