mirror of
https://github.com/golang/go.git
synced 2025-12-08 06:10:04 +00:00
59211acb5d
This implements RFC 9155 by removing support for SHA-1 algorithms:
- we don't advertise them in ClientHello and CertificateRequest
(where supportedSignatureAlgorithms is used directly)
- we don't select them in our ServerKeyExchange and CertificateVerify
(where supportedSignatureAlgorithms filters signatureSchemesForCertificate)
- we reject them in the peer's ServerKeyExchange and CertificateVerify
(where we check against the algorithms we advertised in ClientHello
and CertificateRequest)
Fixes #72883
Change-Id: I6a6a4656e2aafd2c38cdd32090d3d8a9a8047818
Reviewed-on: https://go-review.googlesource.com/c/go/+/658216
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: David Chase <drchase@google.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
|
||
|---|---|---|
| .. | ||
| archive/tar | ||
| crypto | ||
| debug/elf | ||
| go | ||
| hash | ||
| io/fs | ||
| log/slog | ||
| mime/multipart | ||
| net | ||
| os | ||
| reflect | ||
| regexp/syntax | ||
| runtime | ||
| sync | ||
| testing | ||
| unicode | ||
| unique | ||
| 0-heading.md | ||
| README | ||
API changes and other small changes to the standard library go here.