cybercyst/go
1
0
Fork 0
mirror of https://github.com/golang/go.git synced 2025-05-09 01:23:01 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
go/doc/next/6-stdlib/99-minor/crypto/tls/32936.md
Bobby Powers f053f4f921 crypto/tls: expose extensions presented by client to GetCertificate 
This enables JA3 and JA4 TLS fingerprinting to be implemented from
the GetCertificate callback, similar to what BoringSSL provides with
its SSL_CTX_set_dos_protection_cb hook.

fixes #32936

Change-Id: Idb54ebcb43075582fcef0ac6438727f494543424
Reviewed-on: https://go-review.googlesource.com/c/go/+/471396
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
2024-08-09 18:45:11 +00:00

177 B
Raw Blame History

The [ClientHelloInfo] struct passed to [Config.GetCertificate] now includes an Extensions field, which can be useful for fingerprinting TLS clients.