]> Cypherpunks.ru repositories - gostls13.git/commit
crypto/tls: remove SSLv3 support
authorFilippo Valsorda <filippo@golang.org>
Tue, 27 Aug 2019 21:27:45 +0000 (17:27 -0400)
committerFilippo Valsorda <filippo@golang.org>
Tue, 27 Aug 2019 22:24:05 +0000 (22:24 +0000)
commitffcb678f47bfd30de182320b6d057ca4428e976d
treee2b372a8d718ba9d1211c3fdfa1286a938342027
parent52ae04fdfc66664b327a4cb4057e339f132de8f9
crypto/tls: remove SSLv3 support

SSLv3 has been irreparably broken since the POODLE attack 5 years ago
and RFC 7568 (f.k.a. draft-ietf-tls-sslv3-diediedie) prohibits its use
in no uncertain terms.

As announced in the Go 1.13 release notes, remove support for it
entirely in Go 1.14.

Updates #32716

Change-Id: Id653557961d8f75f484a01e6afd2e104a4ccceaf
Reviewed-on: https://go-review.googlesource.com/c/go/+/191976
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
16 files changed:
src/crypto/tls/auth_test.go
src/crypto/tls/cipher_suites.go
src/crypto/tls/common.go
src/crypto/tls/conn.go
src/crypto/tls/handshake_client.go
src/crypto/tls/handshake_server.go
src/crypto/tls/handshake_server_test.go
src/crypto/tls/handshake_server_tls13.go
src/crypto/tls/handshake_test.go
src/crypto/tls/key_agreement.go
src/crypto/tls/prf.go
src/crypto/tls/prf_test.go
src/crypto/tls/testdata/Server-SSLv3-RSA-3DES [deleted file]
src/crypto/tls/testdata/Server-SSLv3-RSA-AES [deleted file]
src/crypto/tls/testdata/Server-SSLv3-RSA-RC4 [deleted file]
src/crypto/tls/tls_test.go