crypto/tls: add support for Certificate Transparency

This change adds support for serving and receiving Signed Certificate
Timestamps as described in RFC 6962.

The server is now capable of serving SCTs listed in the Certificate
structure. The client now asks for SCTs and, if any are received,
they are exposed in the ConnectionState structure.

Fixes #10201

Change-Id: Ib3adae98cb4f173bc85cec04d2bdd3aa0fec70bb
Reviewed-on: https://go-review.googlesource.com/8988
Reviewed-by: Adam Langley <agl@golang.org>
Run-TryBot: Adam Langley <agl@golang.org>
Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com>

1 files changed, 47 insertions, 46 deletions

diff --git a/src/crypto/tls/testdata/Client-TLSv10-ClientCert-RSA-ECDSA b/src/crypto/tls/testdata/Client-TLSv10-ClientCert-RSA-ECDSA
index 9dfec4d6fa..4aa6d80517 100644
--- a/src/crypto/tls/testdata/Client-TLSv10-ClientCert-RSA-ECDSA
+++ b/src/crypto/tls/testdata/Client-TLSv10-ClientCert-RSA-ECDSA
@@ -1,18 +1,19 @@
 >>> Flow 1 (client to server)
-00000000  16 03 01 00 79 01 00 00  75 03 03 00 00 00 00 00  |....y...u.......|
+00000000  16 03 01 00 7d 01 00 00  79 03 03 00 00 00 00 00  |....}...y.......|
 00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
 00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 1e c0 2f  |.............../|
 00000030  c0 2b c0 30 c0 2c c0 11  c0 07 c0 13 c0 09 c0 14  |.+.0.,..........|
-00000040  c0 0a 00 05 00 2f 00 35  c0 12 00 0a 01 00 00 2e  |...../.5........|
+00000040  c0 0a 00 05 00 2f 00 35  c0 12 00 0a 01 00 00 32  |...../.5.......2|
 00000050  00 05 00 05 01 00 00 00  00 00 0a 00 08 00 06 00  |................|
 00000060  17 00 18 00 19 00 0b 00  02 01 00 00 0d 00 0a 00  |................|
-00000070  08 04 01 04 03 02 01 02  03 ff 01 00 01 00        |..............|
+00000070  08 04 01 04 03 02 01 02  03 ff 01 00 01 00 00 12  |................|
+00000080  00 00                                             |..|
 >>> Flow 2 (server to client)
-00000000  16 03 01 00 59 02 00 00  55 03 01 60 fd 2a c3 90  |....Y...U..`.*..|
-00000010  e3 1d e7 96 4a e7 2c d3  c7 35 80 67 7f 7e 57 8f  |....J.,..5.g.~W.|
-00000020  f1 9c 65 35 36 cd e3 98  ae ed 1e 20 58 3f 0d 2f  |..e56...... X?./|
-00000030  77 10 eb 1a b6 03 96 09  f3 6d 22 9f 4b 96 21 06  |w........m".K.!.|
-00000040  84 d2 da 9a 14 09 b4 d8  be 62 45 91 c0 09 00 00  |.........bE.....|
+00000000  16 03 01 00 59 02 00 00  55 03 01 f0 45 fd 0c 7b  |....Y...U...E..{|
+00000010  34 08 a5 2c 41 57 7c ef  54 b1 11 a4 88 c4 8b b7  |4..,AW|.T.......|
+00000020  37 ff 64 e8 e9 49 59 62  30 07 50 20 6e cc 00 df  |7.d..IYb0.P n...|
+00000030  d4 5c f4 64 ce 63 7c 86  89 9a 6f 41 c6 e7 0a e9  |.\.d.c|...oA....|
+00000040  5b 46 c4 a2 fd b3 13 dc  e4 2c b2 80 c0 09 00 00  |[F.......,......|
 00000050  0d ff 01 00 01 00 00 0b  00 04 03 00 01 02 16 03  |................|
 00000060  01 02 0e 0b 00 02 0a 00  02 07 00 02 04 30 82 02  |.............0..|
 00000070  00 30 82 01 62 02 09 00  b8 bf 2d 47 a0 d2 eb f4  |.0..b.....-G....|
@@ -47,20 +48,20 @@
 00000240  13 83 0d 94 06 bb d4 37  7a f6 ec 7a c9 86 2e dd  |.......7z..z....|
 00000250  d7 11 69 7f 85 7c 56 de  fb 31 78 2b e4 c7 78 0d  |..i..|V..1x+..x.|
 00000260  ae cb be 9e 4e 36 24 31  7b 6a 0f 39 95 12 07 8f  |....N6$1{j.9....|
-00000270  2a 16 03 01 00 d5 0c 00  00 d1 03 00 17 41 04 b2  |*............A..|
-00000280  dd fb 15 7b ac 21 6d 89  5f 18 69 18 d7 b2 ef f7  |...{.!m._.i.....|
-00000290  b6 83 99 2d 06 98 38 72  5b 58 b6 6d 09 d3 00 2e  |...-..8r[X.m....|
-000002a0  a0 06 02 46 4d c6 d0 1f  a8 cb c9 74 7e e1 1e 0d  |...FM......t~...|
-000002b0  f4 36 2b 38 b7 ab 29 bd  39 73 a8 b8 55 2a b1 00  |.6+8..).9s..U*..|
-000002c0  8a 30 81 87 02 41 7d 26  e5 9f 73 c4 eb ea d7 59  |.0...A}&..s....Y|
-000002d0  ab b8 7a b9 b7 f6 70 6d  9e 8b a6 4a c2 fc 73 5a  |..z...pm...J..sZ|
-000002e0  78 2c 27 ef ff 52 91 4a  74 12 43 2f 49 d7 55 18  |x,'..R.Jt.C/I.U.|
-000002f0  9f 72 c6 a6 25 0a 2a 94  47 5d 66 08 13 e8 ef af  |.r..%.*.G]f.....|
-00000300  df 12 fa 70 91 86 87 02  42 00 dc 98 50 24 fa 27  |...p....B...P$.'|
-00000310  95 cb 01 c1 ee e9 18 7e  5b b0 b1 e3 f9 e2 56 ff  |.......~[.....V.|
-00000320  d7 d7 41 f3 f1 b1 28 1f  a1 19 62 29 74 1d 0e 4d  |..A...(...b)t..M|
-00000330  57 3f 99 50 c6 a8 78 57  4d 36 1a 42 6b 64 1c 14  |W?.P..xWM6.Bkd..|
-00000340  e8 36 c6 a8 cc f7 75 f7  f7 7d c9 16 03 01 00 0e  |.6....u..}......|
+00000270  2a 16 03 01 00 d5 0c 00  00 d1 03 00 17 41 04 95  |*............A..|
+00000280  cd 51 ea 04 1b ba ca 31  b8 01 60 6c 20 45 31 03  |.Q.....1..`l E1.|
+00000290  03 5f 9f 9d 04 b8 8e 82  7a 4d fd 3e 48 40 ea 5c  |._......zM.>H@.\|
+000002a0  cb d5 4b 2b 2b df bd 38  c7 c8 33 5e 75 2e 88 1a  |..K++..8..3^u...|
+000002b0  4a e3 40 ed ad 79 32 3f  ea 23 d5 a0 26 57 b2 00  |J.@..y2?.#..&W..|
+000002c0  8a 30 81 87 02 42 01 9e  d5 0a 85 a4 ad 7d c2 8a  |.0...B.......}..|
+000002d0  ba 0b 21 4c 97 df 57 dd  59 cf 89 32 ff 9d 9c c5  |..!L..W.Y..2....|
+000002e0  30 a1 fe 58 fa ab 18 41  8e d2 82 6b 5c 07 89 96  |0..X...A...k\...|
+000002f0  5a d3 a4 62 48 16 24 a1  ce 17 ea 72 62 e5 b2 9e  |Z..bH.$....rb...|
+00000300  8c 27 ac 6c 62 d7 0c 2d  02 41 13 73 90 e0 cb 0f  |.'.lb..-.A.s....|
+00000310  49 5f b3 20 a5 1b ff b4  6a ea 3b 4c 0b d8 2a da  |I_. ....j.;L..*.|
+00000320  44 49 be 16 6a 8b 13 02  88 5e 4c 17 40 4a 1a 38  |DI..j....^L.@J.8|
+00000330  91 82 fa d9 5c 40 04 d6  59 4c d1 9a 04 5a 97 8d  |....\@..YL...Z..|
+00000340  b0 5b 4b e7 da ea ad f0  a8 39 f9 16 03 01 00 0e  |.[K......9......|
 00000350  0d 00 00 06 03 01 02 40  00 00 0e 00 00 00        |.......@......|
 >>> Flow 3 (client to server)
 00000000  16 03 01 01 fb 0b 00 01  f7 00 01 f4 00 01 f1 30  |...............0|
@@ -100,29 +101,29 @@
 00000220  a7 24 20 3e b2 56 1c ce  97 28 5e f8 2b 2d 4f 9e  |.$ >.V...(^.+-O.|
 00000230  f1 07 9f 6c 4b 5b 83 56  e2 32 42 e9 58 b6 d7 49  |...lK[.V.2B.X..I|
 00000240  a6 b5 68 1a 41 03 56 6b  dc 5a 89 16 03 01 00 86  |..h.A.Vk.Z......|
-00000250  0f 00 00 82 00 80 1c 5e  19 d9 f9 4f 97 8d 92 a5  |.......^...O....|
-00000260  73 87 be 46 df 6b 39 be  2c f2 13 73 da a4 04 47  |s..F.k9.,..s...G|
-00000270  44 11 72 6f ea a9 2d ea  fc 6a aa e4 e5 85 d3 60  |D.ro..-..j.....`|
-00000280  3c aa 2f 81 dd bc 4f 7b  bb 77 58 f7 78 15 6f 21  |<./...O{.wX.x.o!|
-00000290  7c c4 bb 95 af 85 49 ab  3f 68 cf bd 18 be e1 3e  ||.....I.?h.....>|
-000002a0  9e 59 64 47 39 37 d5 cf  ba 84 44 2a 4b 8b 2d cb  |.YdG97....D*K.-.|
-000002b0  36 24 87 c4 c5 ba 96 91  b2 b3 d0 30 87 b3 7e 2d  |6$.........0..~-|
-000002c0  8f 51 0e 47 af c6 0c 33  48 fd 37 d8 bb f2 95 2c  |.Q.G...3H.7....,|
-000002d0  72 ca c6 3c ab 8d 14 03  01 00 01 01 16 03 01 00  |r..<............|
-000002e0  30 52 e6 b2 ba 4c be e7  e9 ad bf 9b 86 2d fb 90  |0R...L.......-..|
-000002f0  1c 90 86 55 7e 3e 75 63  df 38 54 d6 20 25 37 ae  |...U~>uc.8T. %7.|
-00000300  ab 4f ab 85 84 03 61 f7  eb 56 bd 1a 17 f3 da f6  |.O....a..V......|
-00000310  6d                                                |m|
+00000250  0f 00 00 82 00 80 4b d2  ef 33 07 cc fb b4 e8 0f  |......K..3......|
+00000260  10 5d 42 29 2b d8 b2 45  1d 5f 83 b5 48 79 f8 78  |.]B)+..E._..Hy.x|
+00000270  a6 6b 46 22 46 7b da 57  63 10 8e c7 fa a4 20 f7  |.kF"F{.Wc..... .|
+00000280  9d 82 51 06 9e b7 18 ac  a7 8f 91 c6 57 a4 2f 86  |..Q.........W./.|
+00000290  c3 ed 64 3a e8 2c a4 de  c3 8e c0 7b ef 32 a8 7b  |..d:.,.....{.2.{|
+000002a0  c5 69 b1 4f 96 9e a5 34  9c 18 0c 42 7f 4f b8 17  |.i.O...4...B.O..|
+000002b0  cc 75 66 8f 80 5d d5 53  0f a3 fc 60 39 05 4b 7f  |.uf..].S...`9.K.|
+000002c0  59 f2 57 50 fe 4d 36 14  8e 6c b2 56 eb b6 dd 0c  |Y.WP.M6..l.V....|
+000002d0  29 77 1f d1 76 58 14 03  01 00 01 01 16 03 01 00  |)w..vX..........|
+000002e0  30 e5 e6 54 c4 fc 21 54  55 78 5e 5f f9 7b d1 94  |0..T..!TUx^_.{..|
+000002f0  1a bf 11 27 cc d8 4a 45  67 fa 95 9a 5e 0d 34 0c  |...'..JEg...^.4.|
+00000300  49 0a a6 60 26 2e a0 f5  a2 c1 04 23 3d 57 36 ac  |I..`&......#=W6.|
+00000310  2d                                                |-|
 >>> Flow 4 (server to client)
-00000000  14 03 01 00 01 01 16 03  01 00 30 ae 6b 02 f3 d5  |..........0.k...|
-00000010  ff 91 fb 05 87 22 c6 f7  ac a8 83 d8 2a 10 89 69  |....."......*..i|
-00000020  e8 16 83 a9 5c 64 14 d2  15 40 94 ac 14 15 8f 75  |....\d...@.....u|
-00000030  27 19 a7 75 e9 8d e7 48  8b 62 0c                 |'..u...H.b.|
+00000000  14 03 01 00 01 01 16 03  01 00 30 35 60 71 60 83  |..........05`q`.|
+00000010  d9 7c 2a 4d 1f 77 94 aa  7a 5b c1 62 95 9a 97 54  |.|*M.w..z[.b...T|
+00000020  39 b0 65 87 1b 12 28 99  07 70 b8 7c 10 94 69 93  |9.e...(..p.|..i.|
+00000030  30 37 bf f4 87 c7 e0 69  0e 75 e5                 |07.....i.u.|
 >>> Flow 5 (client to server)
-00000000  17 03 01 00 20 09 0e f5  bb d9 7a 54 db 9e e6 22  |.... .....zT..."|
-00000010  ea 9d 98 7e e6 af ba b1  dc c3 55 ad cc 4a f0 fa  |...~......U..J..|
-00000020  0d 3a 9f 49 80 17 03 01  00 20 d0 96 b0 1d 37 42  |.:.I..... ....7B|
-00000030  0d 03 64 1d 87 24 84 ff  f1 62 28 e3 6b 86 a1 54  |..d..$...b(.k..T|
-00000040  f2 65 5e ae 01 db 59 77  b1 c3 15 03 01 00 20 a0  |.e^...Yw...... .|
-00000050  88 b0 60 07 a6 05 13 dd  cd f4 7c e7 57 09 b1 98  |..`.......|.W...|
-00000060  bf b1 93 f1 02 cb 86 67  36 c5 e2 a8 81 c8 8f     |.......g6......|
+00000000  17 03 01 00 20 10 f4 8d  d4 50 ca 0c a0 c4 ea 18  |.... ....P......|
+00000010  ef fb f8 c7 62 38 d5 e9  d6 03 5f 6d 41 d5 36 bf  |....b8...._mA.6.|
+00000020  fc c9 6e 85 3b 17 03 01  00 20 8d 96 f6 e0 5f c6  |..n.;.... ...._.|
+00000030  c5 93 f9 0b 14 05 be d3  92 9a 8c 98 1c 63 5b dd  |.............c[.|
+00000040  15 ef 90 4d 46 a6 af 34  b2 08 15 03 01 00 20 8a  |...MF..4...... .|
+00000050  dc e8 c7 55 02 36 fe 48  bd 9b cf 63 da ec 81 9b  |...U.6.H...c....|
+00000060  54 be 43 ce 19 ab b3 c9  60 53 13 55 58 31 73     |T.C.....`S.UX1s|