Comments (5)
Yes, it is expected. It is really not needed to test all the conditions as the other ones will fail one way or another. The added of a dcCounter
was a request, which I think is unnecessary as it tests with every possible algorithm the tls connection (while in truthness if the DC is able to be created and validated, then it should work).
I expected to change the way DC test work when the new API lands (next week when I return to work): the usage of callbacks make it almost impossible to check with different algos and variables.
from go.
I'm going to leave this open for a while until the design of the new API is taken into account.
from go.
the usage of callbacks make it almost impossible to check with different algos and variables
it is possible to create a factory of functions, so each produced function must use one combination of dc and signature scheme.
from go.
it is possible to create a factory of functions, so each produced function must use one combination of dc and signature scheme.
The callbacks will likely disappear in the new API by using the cert ones, so no need of it then.
from go.
Solved now.
from go.
Related Issues (20)
- crypto/tls: Unit tests for ECH edge caes
- crypto/tls: Add ECHOffered ConnectionState flag HOT 1
- How to properly deploy ECH in transparent proxy mode HOT 9
- Add support for hybrid key exchange algorithms with TLS
- Update CIRCL reference HOT 2
- signatureSchemeForDelegatedCredential is unneccessary HOT 1
- `selectSignatureSchemeDC` does not account for the client's `supported_algorithms` HOT 1
- `getSignatureAlgorithm` returns based on the intermediate certificate HOT 1
- DC tests don't validate certificates HOT 2
- Creating a ECH client connection HOT 6
- Remove custom fields in tls.Config HOT 2
- PQ cipher suites are not used even when specified in tls.Config HOT 2
- Unknown field CFEventHandler HOT 1
- Unable to use the keys generated with the CIRCL library HOT 2
- Is it possible to enable ECH in a forward proxy?
- Kyber example incompatible with Google's kex implementation HOT 3
- Incorrect PublicKeyAlgorithm.String() of x509.EdDilithium3 in parsed certificate HOT 1
- Plaintext SNI with ECH enabled
- Templates for issues and PRs HOT 2
- Add hybrid pq key exchange for fips-validated module
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from go.