12 Commits

Author	SHA1	Message	Date
Andrew Kelley	611a1fdd6d	std.crypto.tls: add API for sending close_notify ... This commit adds `writeEnd` and `writeAllEnd` in order to send data and also notify the server that there will be no more data written. Unfortunately, it seems most TLS implementations in the wild get this wrong and immediately close the socket when they see a close_notify, rather than only ending the data stream on the application layer.	2023-01-02 16:57:16 -07:00
Andrew Kelley	0fb78b15aa	std.crypto.tls: use a Decoder abstraction ... This commit introduces tls.Decoder and then uses it in tls.Client. The purpose is to make it difficult to introduce vulnerabilities in the parsing code. With this abstraction in place, bugs in the TLS implementation will trip checks in the decoder, regardless of the actual length of packets sent by the other party, so that we can have confidence when using ReleaseFast builds.	2023-01-02 16:57:16 -07:00
Andrew Kelley	21ab99174e	std.crypto.tls.Client: use enums more	2023-01-02 16:57:16 -07:00
Andrew Kelley	ceb211e65f	std.crypto.tls.Client: handle key_update message	2023-01-02 16:57:15 -07:00
Andrew Kelley	4f9f4575bd	std.crypto.tls: rename HandshakeCipher	2023-01-02 16:57:15 -07:00
Andrew Kelley	bbc074252c	introduce std.crypto.CertificateBundle ... for reading root certificate authority bundles from standard installation locations on the file system. So far only Linux logic is added.	2023-01-02 16:57:15 -07:00
Andrew Kelley	3237000d95	std.crypto.tls: rudimentary certificate parsing	2023-01-02 16:57:15 -07:00
Andrew Kelley	5d7eca6669	std.crypto.tls.Client: fix verify_data for batched handshakes	2023-01-02 16:57:15 -07:00
Andrew Kelley	e2efba76aa	std.crypto.tls: refactor to remove mutations ... build up the hello message with array concatenation and helper functions rather than hard-coded offsets and lengths.	2023-01-02 16:57:15 -07:00
Andrew Kelley	41f4461cda	std.crypto.tls.Client: verify the server's Finished message	2023-01-02 16:57:15 -07:00
Andrew Kelley	942b5b468f	std.crypto.tls: implement the rest of the cipher suites ... Also: * Use KeyPair.create() function * Don't bother with CCM	2023-01-02 16:57:15 -07:00
Andrew Kelley	93ab8be8d8	extract std.crypto.tls.Client into separate namespace	2023-01-02 16:57:15 -07:00