go/src/crypto
Roland Shoemaker 7b872b6d95 crypto/tls: restore OCSP and SCTs during session resumption
Restore previously sent SCTs and stapled OCSP response during session
resumption for both TLS 1.2 and 1.3. This behavior is somewhat
complicated for TLS 1.2 as SCTs are sent during the server hello,
so they override what is saved in ClientSessionState. It is likely
that if the server is sending a different set of SCTs there is probably
a reason for doing so, such as a log being retired, or SCT validation
requirements changing, so it makes sense to defer to the server in
that case.

Fixes #39075

Change-Id: I3c0fa2f69c6bf0247a447c48a1b4c733a882a233
Reviewed-on: https://go-review.googlesource.com/c/go/+/234237
Reviewed-by: Filippo Valsorda <filippo@golang.org>
2020-06-09 23:24:08 +00:00
..
aes crypto/aes,crypto/cipher: add asm implementation for aes-gcm on ppc64le 2019-09-24 16:15:36 +00:00
cipher crypto/cipher: require non-zero nonce size for AES-GCM 2020-02-24 15:45:26 +00:00
des cmd/go: further reduce init work 2019-03-31 10:49:55 +00:00
dsa all: fix a bunch of misspellings 2019-11-15 21:04:43 +00:00
ecdsa crypto/rsa,crypto/ecdsa,crypto/ed25519: implement PrivateKey.Equal 2020-05-05 18:05:10 +00:00
ed25519 crypto/rsa,crypto/ecdsa,crypto/ed25519: implement PrivateKey.Equal 2020-05-05 18:05:10 +00:00
elliptic crypto/elliptic: implement MarshalCompressed and UnmarshalCompressed 2020-05-07 23:41:27 +00:00
hmac crypto/hmac: speed up repeated operations with the same key 2020-05-07 15:47:09 +00:00
internal
md5 all: remove nacl (part 3, more amd64p32) 2019-10-10 22:38:38 +00:00
rand all: remove the nacl port (part 1) 2019-10-09 06:14:44 +00:00
rc4 crypto/rc4: remove false guarantees from Reset docs and deprecate it 2019-02-22 17:05:17 +00:00
rsa crypto/rsa,crypto/ecdsa,crypto/ed25519: implement PrivateKey.Equal 2020-05-05 18:05:10 +00:00
sha1 all: remove nacl (part 3, more amd64p32) 2019-10-10 22:38:38 +00:00
sha256 crypto/sha*: replace putUint{32,64} helpers 2019-05-23 16:16:26 +00:00
sha512 crypto/sha512: optimize sha512 by removing function literal 2020-04-03 18:17:13 +00:00
subtle
tls crypto/tls: restore OCSP and SCTs during session resumption 2020-06-09 23:24:08 +00:00
x509 crypto/x509: match RFC suggested SKID generation method 2020-06-08 16:09:45 +00:00
crypto.go crypto: implement Hash.String 2020-03-24 17:24:24 +00:00
issue21104_test.go