sync: merge changes from go 1.25.0#370

Open

wwqgtxx wants to merge 36 commits into

refraction-networking:masterfrom

wwqgtxx:sync-go1.25

Commits on Sep 21, 2025

crypto/tls: fix incorrect EncryptedClientHelloKey comment

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: improve ech parsing errors

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: reject empty TLS 1.3 session ticket

cpu
authored and
wwqgtxx
committed
crypto/tls: ignore TLS 1.3 user canceled alerts

cpu
authored and
wwqgtxx
committed
crypto/tls: align cert decode alert w/ BSSL

cpu
authored and
wwqgtxx
committed
crypto/tls: reject TLS 1.3 compat session ID in TLS 1.2

cpu
authored and
wwqgtxx
committed
crypto/tls: allow P-521 in FIPS 140-3 mode and Go+BoringCrypto

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: add ConnectionState.CurveID

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: clean up supported/default/allowed parameters

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: relax native FIPS 140-3 mode

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: fix ECH compatibility

gdy666
authored and
wwqgtxx
committed
crypto/tls: add missing RUnlock in ticketKeys

espadolini
authored and
wwqgtxx
committed
crypto/tls: use crypto/hkdf

qmuntal
authored and
wwqgtxx
committed
crypto/tls: add offered cipher suites to the handshake error

drakkan
authored and
wwqgtxx
committed
crypto/tls: fix a testing deadlock that occurs on a TLS protocol error

eay
authored and
wwqgtxx
committed
crypto/tls: skip part of the test based on GOOS instead of GOARCH

nevkontakte
authored and
wwqgtxx
committed
crypto/tls: add scheduler call to TestCertCache refcount timeout loop

mknyszek
authored and
wwqgtxx
committed
crypto/tls: use runtime.Gosched instead of time.After in TestCertCache

mknyszek
authored and
wwqgtxx
committed
crypto/tls: use illegal param alert for bad compression

cpu
authored and
wwqgtxx
committed
crypto/tls: update TLS 1.3 client compression validation

cpu
authored and
wwqgtxx
committed
crypto/tls: err for unsupported point format configs

cpu
authored and
wwqgtxx
committed
crypto/tls: fix TLS <1.3 client cert required alert

cpu
authored and
wwqgtxx
committed
crypto/tls: handle client hello version too high

cpu
authored and
wwqgtxx
committed

Commits on Dec 15, 2025

crypto/tls: add GetEncryptedClientHelloKeys

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: have servers prefer TLS 1.3 when supported

cpu
authored and
wwqgtxx
committed
crypto/tls: verify server chooses advertised curve

cpu
authored and
wwqgtxx
committed
crypto/tls: delete dead code curveIDForCurve

cpu
authored and
wwqgtxx
committed
crypto/tls: match compression method alert across versions

cpu
authored and
wwqgtxx
committed
crypto/tls: don't advertise TLS 1.2-only sigAlgs in TLS 1.3

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: use decode alert for handshake msg unmarshal err

cpu
authored and
wwqgtxx
committed
crypto/tls: reject duplicate TLS 1.3 EncryptedExtensions

cpu
authored and
wwqgtxx
committed
crypto/tls: signature_algorithms in CertificateRequest can't be empty

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: enable signature algorithm BoGo tests (and fix two bugs)

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: ensure the ECDSA curve matches the signature algorithm

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: empty server_name conf. ext. from server

cpu
authored and
wwqgtxx
committed

Commits on Dec 20, 2025

crypto/tls: use inner hello for earlyData when using QUIC and ECH I don't think we have good QUIC ECH tests. BoGo has some for this, but I'm not sure how easy it would be to enable those for QUIC.

rolandshoemaker
authored and
wwqgtxx
committed