crypto/tls

reject duplicate TLS 1.3 EncryptedExtensions

#673757 opened 1 day ago by Daniel McCarney

enable BoGo DisabledCurve-HelloRetryRequest-TLS13

#673756 opened 1 day ago by Daniel McCarney

delete dead code curveIDForCurve

#673755 opened 1 day ago by Daniel McCarney

use decode alert for handshake msg unmarshal err

#673738 opened 1 day ago by Daniel McCarney

update BoGo SessionID test skip reasons

#673737 opened 1 day ago by Daniel McCarney

match compression method alert across versions

#673736 opened 1 day ago by Daniel McCarney

verify server chooses advertised curve

#673735 opened 1 day ago by Daniel McCarney

have servers prefer TLS 1.3 when supported

#673236 opened 3 days ago by Daniel McCarney

allow dynamic reloading of root certificates

#670815 opened 1 week ago by Ian Stapleton Cordasco

add GetEncryptedClientHelloKeysgo1.25

#670655 opened 1 week ago by Roland Shoemaker

disable SHA-1 signature algorithms in TLS 1.2go1.25

#658216 opened 2 months ago by Filippo Valsorda

don't advertise TLS 1.2-only sigAlgs in TLS 1.3go1.25

#658215 opened 2 months ago by Filippo Valsorda

add support for cipher flags to bogo_shim_test

#650738 opened 2 months ago by Clide Stefani

replace custom intern cache with weak cachego1.25

#644176 opened 3 months ago by Roland Shoemaker

only check ECH errors if ECH is being tested in bogoex-wait-release

#643975 opened 3 months ago by Roland Shoemaker

update BoGo shim to use one-to-many error mapping for canonical error checking

#643895 opened 3 months ago by Neal Patel

correct error message for QUIC TLS min version

#601056 opened 9 months ago by Kevin Nguyen

relax cs.HandshakeComplete checks in bogo_shim_test

#599437 opened 10 months ago by Clide Stefani

add -expect-certificate-types flag to bogo_shim_test

#599035 opened 10 months ago by Clide Stefani

add support for cipher flags to bogo_shim_test

#597895 opened 10 months ago by Clide Stefani

support signed cert timestamps flags in bogo_shim_test

#597195 opened 10 months ago by Clide Stefani

using slices.Contains

#575235 opened 1 year ago by cuiweixie

cipherSuites and cipherSuitesTLS13 replace with a map

#571255 opened 1 year ago by wulianglongrd

don't require Config.Minversion to be set when using QUIC

#537575 opened 2 years ago by Marten Seemann

check if quic conn can send session ticket

#528755 opened 2 years ago by Audi P. R. Putra

drop ClientForConfig mutex when session tickets disabled

#508235 opened 2 years ago by Damien Neil

unexport SessionState.Extra, add PushExtraData / PopExtraData

#501775 opened 2 years ago by Marten Seemann

change SessionState.Extra to [][]byte

#501306 opened 2 years ago by Damien Neil

initialize session ticket keys on Config.Clone

#499235 opened 2 years ago by Marten Seemann

return correct alerts during message decoding

#487195 opened 2 years ago by Roland Shoemaker

offer only TLS 1.3 cipher suites if minimum version is TLS 1.3

#480535 opened 2 years ago by Marten Seemann

preallocate the HKDF label in cipherSuiteTLS13.expandLabel

#480095 opened 2 years ago by Marten Seemann

set const maxUselessRecords to 32 (the same with OpenSSL)

#473955 opened 2 years ago by RPRX

reject change_cipher_spec record after handshake in TLS 1.3

#473936 opened 2 years ago by RPRX

store value atLeastReader in tls.Conn

#464835 opened 2 years ago by Jorropo

customisable max TLS record size

#435474 opened 2 years ago by Julie Qiu

annotate KeyLogWriter errors

#414014 opened 2 years ago by Rodrigo Queiro

centralize mgmt of TLS trace events

#403077 opened 3 years ago by Will Hawkins

shrink tls Conn's rawInput with a small buffer

#370581 opened 3 years ago by Jozef Kralik

populate peerCertificates before validation fails

#348769 opened 3 years ago by Laszlo Soos

replace tls Conn's rawInput with a small buffer when Read timeout

#347916 opened 3 years ago by Xargin

panic on all-zero session ticket keysex-wait-release

#318130 opened 4 years ago by Filippo Valsorda

add error context to handshake error

#299449 opened 4 years ago by Shang Jian Ding

support post-handshake client authentication

#246337 opened 4 years ago by Felix Maurer

simplify the process of cipher suites checking.

#246038 opened 4 years ago by SparrowLii

supprtedVersions:return rightly for nil pointer parameter and plainer

#245837 opened 4 years ago by SparrowLii

make checkForResumption side-effect free

#245160 opened 4 years ago by SparrowLii

implement full Lucky 13 countermeasures for SHA-1 CBC ciphers

#170703 opened 6 years ago by David Benjamin

avoid cache-based side channels in extracting the remote MAC

#170702 opened 6 years ago by David Benjamin

misc BoGo-induced fixes

#160019 opened 6 years ago by Filippo Valsorda

add a BoringSSL test suite (BoGo) integration

#160017 opened 6 years ago by Filippo Valsorda