1
0
mirror of https://github.com/golang/go synced 2024-11-18 01:44:49 -07:00
go/src/crypto
Adam Langley 81038d2e2b crypto/tls: add GetClientCertificate callback
Currently, the selection of a client certificate done internally based
on the limitations given by the server's request and the certifcates in
the Config. This means that it's not possible for an application to
control that selection based on details of the request.

This change adds a callback, GetClientCertificate, that is called by a
Client during the handshake and which allows applications to select the
best certificate at that time.

(Based on https://golang.org/cl/25570/ by Bernd Fix.)

Fixes #16626.

Change-Id: Ia4cea03235d2aa3c9fd49c99c227593c8e86ddd9
Reviewed-on: https://go-review.googlesource.com/32115
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2016-10-27 17:20:07 +00:00
..
aes crypto/{aes,cipher}: fix panic in CBC on s390x when src length is 0 2016-10-13 21:42:23 +00:00
cipher crypto/{aes,cipher}: fix panic in CBC on s390x when src length is 0 2016-10-13 21:42:23 +00:00
des all: remove unnecessary type conversions 2016-04-15 07:31:45 +00:00
dsa
ecdsa crypto/ecdsa: correct code comment. 2016-10-02 19:38:37 +00:00
elliptic crypto/ecdsa: reject negative inputs. 2016-05-18 14:18:48 +00:00
hmac crypto/hmac: don't test for length equality in Equal. 2016-08-17 23:23:28 +00:00
md5 crypto/md5, crypto/sha1, crypto/sha256: add examples for checksumming a file 2016-09-19 17:29:19 +00:00
rand
rc4 all: fix assembly vet issues 2016-08-25 18:52:31 +00:00
rsa crypto/rsa: clarify comment on maximum message length. 2016-09-22 03:06:25 +00:00
sha1 crypto/tls: implement countermeasures against CBC padding oracles 2016-10-04 13:21:02 +00:00
sha256 crypto/md5, crypto/sha1, crypto/sha256: add examples for checksumming a file 2016-09-19 17:29:19 +00:00
sha512 crypto/sha512: add s390x assembly implementation 2016-04-26 17:37:45 +00:00
subtle crypto/subtle: expand abbreviation to eliminate confusion 2016-06-09 15:30:48 +00:00
tls crypto/tls: add GetClientCertificate callback 2016-10-27 17:20:07 +00:00
x509 crypto/x509: don't accept a root that already appears in a chain. 2016-10-27 17:10:53 +00:00
crypto.go