]> Cypherpunks.ru repositories - gostls13.git/commit
crypto/tls: improve error messages for invalid certificates and signatures
authorFilippo Valsorda <filippo@golang.org>
Tue, 29 Oct 2019 20:46:26 +0000 (16:46 -0400)
committerFilippo Valsorda <filippo@golang.org>
Wed, 30 Oct 2019 20:18:59 +0000 (20:18 +0000)
commitcd18da451faedc4218a5fd0e38f9b3d13aa5da01
tree8e10c35fa895c9f53504b3f845cc1d70329c82da
parenta05934639bde593326f8d7ed9eb3f73f9ba6eb53
crypto/tls: improve error messages for invalid certificates and signatures

Also, fix the alert value sent when a signature by a client certificate
is invalid in TLS 1.0-1.2.

Fixes #35190

Change-Id: I2ae1d5593dfd5ee2b4d979664aec74aab4a8a704
Reviewed-on: https://go-review.googlesource.com/c/go/+/204157
Reviewed-by: Katie Hockman <katie@golang.org>
src/crypto/tls/auth.go
src/crypto/tls/common.go
src/crypto/tls/handshake_client.go
src/crypto/tls/handshake_client_tls13.go
src/crypto/tls/handshake_server.go
src/crypto/tls/handshake_server_tls13.go
src/crypto/tls/key_agreement.go
src/crypto/tls/prf.go
src/crypto/tls/tls_test.go