1
0
mirror of https://github.com/golang/go synced 2024-10-04 21:11:22 -06:00
go/src
David Benjamin 73a0185ad3 crypto/tls: Enforce that version and cipher match on resume.
Per RFC 5246, 7.4.1.3:

   cipher_suite
      The single cipher suite selected by the server from the list in
      ClientHello.cipher_suites.  For resumed sessions, this field is
      the value from the state of the session being resumed.

The specifications are not very clearly written about resuming sessions
at the wrong version (i.e. is the TLS 1.0 notion of "session" the same
type as the TLS 1.1 notion of "session"?). But every other
implementation enforces this check and not doing so has some odd
semantics.

Change-Id: I6234708bd02b636c25139d83b0d35381167e5cad
Reviewed-on: https://go-review.googlesource.com/21153
Reviewed-by: Adam Langley <agl@golang.org>
2016-04-12 01:07:46 +00:00
..
archive all: delete dead test code 2016-03-21 07:10:08 +00:00
bufio all: replace magic 0x80 with named constant utf8.RuneSelf 2016-04-10 15:15:57 +00:00
builtin
bytes bytes: add ContainsRune 2016-04-08 20:24:57 +00:00
cmd cmd/vet: improve documentation for flags, slightly 2016-04-11 22:35:22 +00:00
compress compress/flate: improve short writer error test 2016-04-10 15:59:00 +00:00
container
context context: attempt to deflake timing tests 2016-04-11 23:15:02 +00:00
crypto crypto/tls: Enforce that version and cipher match on resume. 2016-04-12 01:07:46 +00:00
database/sql all: delete dead non-test code 2016-03-25 06:28:13 +00:00
debug debug/gosym: do not forget to close test binay file handle in TestPCLine 2016-04-05 04:43:44 +00:00
encoding all: replace magic 0x80 with named constant utf8.RuneSelf 2016-04-10 15:15:57 +00:00
errors
expvar expvar: Ensure strings are written as valid JSON. 2016-04-06 03:52:39 +00:00
flag
fmt fmt: hold on to all free buffers, regardless of size 2016-04-03 06:20:37 +00:00
go go/importer: make For("gccgo", nil) not panic 2016-04-12 00:11:32 +00:00
hash hash/crc64: Add tests for ECMA polynomial 2016-03-31 20:42:02 +00:00
html all: use bytes.Equal, bytes.Contains and strings.Contains, again 2016-04-11 15:16:54 +00:00
image image/color: add YCbCrToRGB benchmark 2016-04-11 19:15:58 +00:00
index/suffixarray
internal internal/trace: support parsing of 1.5 traces 2016-04-11 17:56:44 +00:00
io io: document WriteString calls Write exactly once 2016-04-12 01:03:51 +00:00
log
math math/big: re-use memory in Int.GCD 2016-04-07 17:19:37 +00:00
mime mime: fix maximum length of encoded-words 2016-03-29 11:19:31 +00:00
net net: make IP.{String,MarshalText} return helpful information on address error 2016-04-12 00:41:17 +00:00
os os/user: wrap getgrnam_r to fix type issues 2016-04-06 15:49:15 +00:00
path all: use bytes.Equal, bytes.Contains and strings.Contains, again 2016-04-11 15:16:54 +00:00
reflect reflect: add s390x support 2016-04-06 04:23:06 +00:00
regexp all: delete dead non-test code 2016-03-25 06:28:13 +00:00
runtime internal/trace: support parsing of 1.5 traces 2016-04-11 17:56:44 +00:00
sort all: delete dead non-test code 2016-03-25 06:28:13 +00:00
strconv
strings bytes, string: add Reset method to Reader 2016-04-07 18:58:01 +00:00
sync sync/atomic: add s390x implementations of atomic functions 2016-04-07 15:30:14 +00:00
syscall syscall: add assembly for Linux on s390x 2016-04-08 18:40:11 +00:00
testing testing: fix flakey test on plan9 2016-04-06 18:35:33 +00:00
text text/template: emit field error over nil pointer error where appropriate 2016-04-10 23:29:29 +00:00
time all: delete dead non-test code 2016-03-25 06:28:13 +00:00
unicode
unsafe
vendor/golang.org/x/net/http2/hpack all: fix spelling mistakes 2016-04-03 17:03:15 +00:00
all.bash
all.bat
all.rc
androidtest.bash
bootstrap.bash
buildall.bash
clean.bash
clean.bat
clean.rc
iostest.bash
make.bash cmd/dist: redo flag-passing for bootstrap 2016-03-18 19:00:03 +00:00
make.bat
Make.dist
make.rc
nacltest.bash
race.bash
race.bat
run.bash
run.bat
run.rc