boringssl

Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

Dan McArdle 995574c225 Reland "Add util/fetch_ech_config_list.go" This is a reland of `160a8891ae` with go.mod and go.sum fixed. This updates golang.org/x/crypto, adds the latest golang.org/x/net as a direct dependency (it was previously an indirect dependency via x/crypto), and cleans up stale entries from go.sum with go mod tidy. Original change's description: > Add util/fetch_ech_config_list.go > > I wrote this tool to make it easier to test the ECH client against > real-world servers with the bssl client tool. I found that manually > extracting an ECHConfigList from a raw HTTPS record is unnecessarily > painful. > > The tool queries DNS over UDP for HTTPS records. If it finds any HTTPS > records in the response, it attempts to extract an ECHConfigList from > the "ech" SvcParam. It can write each extracted ECHConfigList to a file > in a given directory. Once the ECH client implementation lands, the bssl > client tool should have a new flag that that takes the path to an > ECHConfigList file. > > I am using golang.org/x/net/dns/dnsmessage to parse the DNS response. I > recently added the \|UnknownResource\| type to this library to enable > callers (like us) to extract the bytes of otherwise-unsupported records > (like HTTPS). I updated the dependency with `go get -u golang.org/x/net`. > > Although the bssl client tool knows how to resolve the address of its > "-connect" parameter, it is difficult to query HTTPS records in a > platform-agnostic way. If we decide the bssl client should directly > query HTTPS rather than leaning on fetch_ech_config_list.go, we should > look into libresolv. Specifically, the \|res_query\| function enables the > caller to query arbitrary record types. This may open its own can of > cross-platform worms; macOS and Linux typically ship with different > implementations and it is not available on Windows. For more info, see > `man 3 resolver`. > > Bug: 275 > Change-Id: I705591658921f60a958164a18b68ffb697c2ea4b > Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/44104 > Reviewed-by: David Benjamin <davidben@google.com> Bug: 275 Change-Id: I9571e96c7a2ad7e239d86a353929a4e556d71287 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/48106 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com>		3 years ago
..
ar	acvp: add CMAC-AES support.	4 years ago
bot	Make our Python scripts Python-3-compatible.	4 years ago
fipstools	Update ACVP URLs.	4 years ago
testconfig	acvp: add CMAC-AES support.	4 years ago
testresult	Run extension tests at all protocols.	4 years ago
32-bit-toolchain.cmake	acvp: add CMAC-AES support.	4 years ago
BUILD.toplevel	Include assembly optimizations in Bazel builds on Linux-aarch64.	4 years ago
all_tests.go	acvp: add CMAC-AES support.	4 years ago
all_tests.json	acvp: add CMAC-AES support.	4 years ago
check_filenames.go	acvp: add CMAC-AES support.	4 years ago
check_imported_libraries.go	acvp: add CMAC-AES support.	4 years ago
compare_benchmarks.go	acvp: add CMAC-AES support.	4 years ago
convert_comments.go	acvp: add CMAC-AES support.	4 years ago
convert_wycheproof.go	acvp: add CMAC-AES support.	4 years ago
diff_asm.go	Align armv8.pl references to OPENSSL_armcap_P.	4 years ago
doc.config	Export the HPKE implementation.	4 years ago
doc.css	acvp: add CMAC-AES support.	4 years ago
doc.go	Don't mark up the first word in a collective comment.	4 years ago
embed_test_data.go	Move PKCS#12 samples to embed_test_data.	4 years ago
fetch_ech_config_list.go	Reland "Add util/fetch_ech_config_list.go"	3 years ago
generate-asm-lcov.py	acvp: add CMAC-AES support.	4 years ago
generate-coverage.sh	acvp: add CMAC-AES support.	4 years ago
generate_build_files.py	Remove GCC 4.8.99 check.	4 years ago
godeps.go	acvp: add CMAC-AES support.	4 years ago
make_errors.go	Generalize make_errors.go to allow EVP covering multiple directories.	4 years ago
make_prefix_headers.go	acvp: add CMAC-AES support.	4 years ago
read_symbols.go	acvp: add CMAC-AES support.	4 years ago
run_android_tests.go	acvp: add CMAC-AES support.	4 years ago
whitespace.txt	No-op CL to trigger some builds.	4 years ago