crypto/tls: expose extensions presented by client to GetCertificate

This enables JA3 and JA4 TLS fingerprinting to be implemented from
the GetCertificate callback, similar to what BoringSSL provides with
its SSL_CTX_set_dos_protection_cb hook.

fixes #32936

Change-Id: Idb54ebcb43075582fcef0ac6438727f494543424
Reviewed-on: https://go-review.googlesource.com/c/go/+/471396
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
This commit is contained in:
Bobby Powers 2023-02-25 16:24:54 -08:00 committed by Roland Shoemaker
parent 760b722c34
commit f053f4f921
7 changed files with 82 additions and 0 deletions

1
api/next/32936.txt Normal file
View file

@ -0,0 +1 @@
pkg crypto/tls, type ClientHelloInfo struct, Extensions []uint16 #32936