5 Commits

Author	SHA1	Message	Date
Marten Seemann	284996e13c	qtls: protect the tls.ClientSessionCache implementation with a mutex (#4319) ... This prevents a race condition when the underlying ClientSessionCache provided by the application returns the same session ticket for multiple connections. Reusing session tickets is explicitly recommended against by both RFC 8446 and RFC 9001, but it's not forbidden. This fix only benefits applications that compromise their users' privacy by reusing session tickets.	2024-02-09 07:47:28 -08:00
Marten Seemann	013949cda3	ci: update to Go 1.22.0 (#4312)	2024-02-07 18:15:56 -08:00
Marten Seemann	d234d62d52	qtls: only attempt 0-RTT resumption for 0-RTT enabled session tickets (#4183)	2023-12-09 06:17:47 -08:00
Marten Seemann	746290b78a	never allow 0-RTT when using Dial, even if the session ticket allows it (#4125) ... When resuming a TLS session using Dial (and not DialEarly), 0-RTT should be disabled at the TLS layer, even if the session ticket allows for 0-RTT resumption. This bug is not critical, since Dial doesn't return an EarlyConnection, so the client wouldn't be able to actually send 0-RTT data in practice.	2023-10-25 08:20:23 -07:00
Marten Seemann	3d89e545d3	use the new crypto/tls QUIC Transport (#3860)	2023-07-01 11:15:00 -07:00