]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: reject SNI values with a trailing dot.
authorAdam Langley <agl@golang.org>
Mon, 5 Dec 2016 18:24:30 +0000 (10:24 -0800)
committerBrad Fitzpatrick <bradfitz@golang.org>
Wed, 1 Feb 2017 21:59:57 +0000 (21:59 +0000)
commit3f45916433c7e868c75b7a23c9288f8c67447acc
tree217183ff409a939f2015cdcfcda27d1b0a222286
parente56be943753d454b3eeb938c30de812266a8549e
crypto/tls: reject SNI values with a trailing dot.

SNI values may not include a trailing dot according to
https://tools.ietf.org/html/rfc6066#section-3. Although crypto/tls
handled this correctly as a client, it didn't reject this as a server.

This change makes sending an SNI value with a trailing dot a fatal
error.

Updates #18114.

Change-Id: Ib7897ab40e98d4a7a4646ff8469a55233621f631
Reviewed-on: https://go-review.googlesource.com/33904
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/crypto/tls/handshake_client.go
src/crypto/tls/handshake_messages.go
src/crypto/tls/handshake_messages_test.go
src/crypto/tls/handshake_server_test.go