@@ -792,19 +792,28 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
792
792
793
793
< li >
794
794
The < a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > package
795
- now defaults to TLS 1.0.
795
+ minimum protocol version now defaults to TLS 1.0.
796
796
The old default, SSLv3, is still available through < a href ="/pkg/crypto/tls/#Config "> < code > Config</ code > </ a > if needed.
797
797
</ li >
798
798
799
799
< li >
800
- Also, the < a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > package
800
+ The < a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > package
801
801
now supports Signed Certificate Timestamps (SCTs) as specified in RFC 6962.
802
802
The server serves them if they are listed in the
803
803
< a href ="/pkg/crypto/tls/#Certificate "> < code > Certificate</ code > </ a > struct,
804
804
and the client requests them and exposes them, if present,
805
805
in its < a href ="/pkg/crypto/tls/#ConnectionState "> < code > ConnectionState</ code > </ a > struct.
806
- The < a href ="/pkg/crypto/tls/ "> < code > crytpo/tls</ code > </ a > server implementation
807
- will also now always call the
806
+
807
+ < li >
808
+ The stapled OCSP response to a < a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > client connection,
809
+ previously only available via the
810
+ < a href ="/pkg/crypto/tls/#Conn.OCSPResponse "> < code > OCSPResponse</ code > </ a > method,
811
+ is now exposed in the < a href ="/pkg/crypto/tls/#ConnectionState "> < code > ConnectionState</ code > </ a > struct.
812
+ </ li >
813
+
814
+ < li >
815
+ The < a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > server implementation
816
+ will now always call the
808
817
< code > GetCertificate</ code > function in
809
818
the < a href ="/pkg/crypto/tls/#Config "> < code > Config</ code > </ a > struct
810
819
to select a certificate for the connection when none is supplied.
@@ -813,7 +822,7 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
813
822
< li >
814
823
Finally, the session ticket keys in the
815
824
< a href ="/pkg/crypto/tls/ "> < code > crypto/tls</ code > </ a > package
816
- can now be rotated ( changed periodically during an active connection) .
825
+ can now be changed while the server is running .
817
826
This is done through the new
818
827
< a href ="/pkg/crypto/tls/#Config.SetSessionTicketKeys "> < code > SetSessionTicketKeys</ code > </ a >
819
828
method of the
0 commit comments