1
0
mirror of https://github.com/golang/go synced 2024-11-20 09:14:46 -07:00
go/src/pkg
Adam Langley f752484c74 crypto/tls: don't select TLS 1.2 cipher suites in prior versions.
AES-GCM cipher suites are only defined for TLS 1.2, although there's
nothing really version specific about them. However, development
versions of NSS (meaning Firefox and Chrome) have an issue where
they'll advertise TLS 1.2-only cipher suites in a TLS 1.1 ClientHello
but then balk when the server selects one.

This change causes Go clients not to advertise TLS 1.2 cipher suites
unless TLS 1.2 is being used, and prevents servers from selecting them
unless TLS 1.2 has been negotiated.

https://code.google.com/p/chromium/issues/detail?id=297151
https://bugzilla.mozilla.org/show_bug.cgi?id=919677

R=golang-dev, rsc
CC=golang-dev
https://golang.org/cl/13573047
2013-09-26 17:09:56 -04:00
..
archive archive/tar: fix a case where USTAR-split is not working correctly. 2013-09-06 16:49:38 -04:00
bufio bufio: add Writer example 2013-08-12 13:03:50 +10:00
builtin builtin: document print and println 2013-07-09 16:20:19 -07:00
bytes bytes: additional test coverage 2013-09-11 21:20:15 +10:00
compress compress/flate: small documentation fix 2013-09-09 09:37:05 +10:00
container container/list: unexpected panic if Next/Prev called outside of list. 2013-09-09 15:41:36 -07:00
crypto crypto/tls: don't select TLS 1.2 cipher suites in prior versions. 2013-09-26 17:09:56 -04:00
database/sql database/sql: add SetMaxOpenConns 2013-08-30 09:27:33 -07:00
debug runtime: convert .s textflags from numbers to symbolic constants. 2013-08-07 12:20:05 -07:00
encoding encoding/json: don't cache value addressability when building first encoder 2013-09-23 19:57:19 -07:00
errors
expvar
flag flag: export commandLine, the previously internal default FlagSet 2013-08-08 11:50:58 +10:00
fmt fmt: one bad index shouldn't spoil them all 2013-09-23 16:03:57 +10:00
go go/ast: add Slice3 field to SliceExpr 2013-09-24 16:35:35 -07:00
hash all: change textflags from numbers to symbols. 2013-08-12 10:25:36 -07:00
html html/template: update the Tree field after parsing new templates 2013-09-25 10:00:09 +10:00
image image/color/palette: move Plan9Palette and WebSafePalette out of the 2013-08-30 16:03:16 +10:00
index/suffixarray
io io: prevent write to PipeWriter after Close 2013-08-13 11:04:09 -07:00
log syslog: fix data race on 'crashy' in test function 2013-09-09 16:17:59 -04:00
math math/big: Fix variable name in documentation for *Int.Bytes and BitLen. 2013-09-24 16:32:23 -07:00
mime all: dragonfly support 2013-08-24 02:22:52 +10:00
net net: re-enable raw socket tests on windows 2013-09-24 13:15:49 +10:00
os os/exec: add more caveats to StdoutPipe, StderrPipe 2013-09-13 15:43:54 -04:00
path path/filepath: fix race with other tests 2013-09-09 16:42:18 -04:00
reflect reflect: update docs; Interface can return a method value 2013-09-24 10:49:54 +10:00
regexp regexp/syntax: optimize EmptyOpContext 2013-08-29 14:31:10 -07:00
runtime runtime, syscall: update freebsd/arm calling convention to match EABI 2013-09-26 21:35:49 +10:00
sort sort: move example to package level and simplify further 2013-09-16 13:02:01 +10:00
strconv all: protect alloc count tests by -testing.short 2013-08-21 14:00:45 +10:00
strings bytes, strings: use copy in Repeat 2013-08-27 09:21:08 +10:00
sync sync/atomic: adjust for new runtime.cas64 prototype 2013-09-24 15:54:48 -04:00
syscall runtime, syscall: update freebsd/arm calling convention to match EABI 2013-09-26 21:35:49 +10:00
testing testing: don't start timing a Parallel test until it's actually starting 2013-08-19 10:15:30 +10:00
text text/template/parse, html/template: copy Tree.text during html template clone 2013-09-17 14:19:44 +10:00
time time: allow more time for TestOverflowRuntimeTimer to succeed 2013-09-09 15:50:11 +10:00
unicode undo CL 12486043 / ab644299d124 2013-08-05 16:27:24 -07:00
unsafe