Skip to content

Commit aed74b9

Browse files
titanousrobpike
authored andcommitted
doc/go1.5.html: fix and expand crypto/tls changes
- Fix incomplete description of minimum protocol version. - Add mention of the new ConnectionState.OCSPResponse field. - Clarify session ticket key rotation description. Change-Id: I6b62d30a4d0e0f84fd2c0e70e8f66ec14e6a5a90 Reviewed-on: https://go-review.googlesource.com/12197 Reviewed-by: Rob Pike <[email protected]>
1 parent 6c848c6 commit aed74b9

File tree

1 file changed

+14
-5
lines changed

1 file changed

+14
-5
lines changed

doc/go1.5.html

Lines changed: 14 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -792,19 +792,28 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
792792

793793
<li>
794794
The <a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> package
795-
now defaults to TLS 1.0.
795+
minimum protocol version now defaults to TLS 1.0.
796796
The old default, SSLv3, is still available through <a href="/pkg/crypto/tls/#Config"><code>Config</code></a> if needed.
797797
</li>
798798

799799
<li>
800-
Also, the <a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> package
800+
The <a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> package
801801
now supports Signed Certificate Timestamps (SCTs) as specified in RFC 6962.
802802
The server serves them if they are listed in the
803803
<a href="/pkg/crypto/tls/#Certificate"><code>Certificate</code></a> struct,
804804
and the client requests them and exposes them, if present,
805805
in its <a href="/pkg/crypto/tls/#ConnectionState"><code>ConnectionState</code></a> struct.
806-
The <a href="/pkg/crypto/tls/"><code>crytpo/tls</code></a> server implementation
807-
will also now always call the
806+
807+
<li>
808+
The stapled OCSP response to a <a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> client connection,
809+
previously only available via the
810+
<a href="/pkg/crypto/tls/#Conn.OCSPResponse"><code>OCSPResponse</code></a> method,
811+
is now exposed in the <a href="/pkg/crypto/tls/#ConnectionState"><code>ConnectionState</code></a> struct.
812+
</li>
813+
814+
<li>
815+
The <a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> server implementation
816+
will now always call the
808817
<code>GetCertificate</code> function in
809818
the <a href="/pkg/crypto/tls/#Config"><code>Config</code></a> struct
810819
to select a certificate for the connection when none is supplied.
@@ -813,7 +822,7 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
813822
<li>
814823
Finally, the session ticket keys in the
815824
<a href="/pkg/crypto/tls/"><code>crypto/tls</code></a> package
816-
can now be rotated (changed periodically during an active connection).
825+
can now be changed while the server is running.
817826
This is done through the new
818827
<a href="/pkg/crypto/tls/#Config.SetSessionTicketKeys"><code>SetSessionTicketKeys</code></a>
819828
method of the

0 commit comments

Comments
 (0)