crypto/tls: add support for Certificate Transparency

This change adds support for serving and receiving Signed Certificate
Timestamps as described in RFC 6962.

The server is now capable of serving SCTs listed in the Certificate
structure. The client now asks for SCTs and, if any are received,
they are exposed in the ConnectionState structure.

Fixes #10201

Change-Id: Ib3adae98cb4f173bc85cec04d2bdd3aa0fec70bb
Reviewed-on: https://go-review.googlesource.com/8988
Reviewed-by: Adam Langley <agl@golang.org>
Run-TryBot: Adam Langley <agl@golang.org>
Reviewed-by: Jonathan Rudenberg <jonathan@titanous.com>

1 files changed, 50 insertions, 50 deletions

diff --git a/src/crypto/tls/testdata/Client-TLSv12-ClientCert-RSA-ECDSA b/src/crypto/tls/testdata/Client-TLSv12-ClientCert-RSA-ECDSA
index e77002665f..29ebfee51b 100644
--- a/src/crypto/tls/testdata/Client-TLSv12-ClientCert-RSA-ECDSA
+++ b/src/crypto/tls/testdata/Client-TLSv12-ClientCert-RSA-ECDSA
@@ -1,18 +1,19 @@
 >>> Flow 1 (client to server)
-00000000  16 03 01 00 79 01 00 00  75 03 03 00 00 00 00 00  |....y...u.......|
+00000000  16 03 01 00 7d 01 00 00  79 03 03 00 00 00 00 00  |....}...y.......|
 00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
 00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 1e c0 2f  |.............../|
 00000030  c0 2b c0 30 c0 2c c0 11  c0 07 c0 13 c0 09 c0 14  |.+.0.,..........|
-00000040  c0 0a 00 05 00 2f 00 35  c0 12 00 0a 01 00 00 2e  |...../.5........|
+00000040  c0 0a 00 05 00 2f 00 35  c0 12 00 0a 01 00 00 32  |...../.5.......2|
 00000050  00 05 00 05 01 00 00 00  00 00 0a 00 08 00 06 00  |................|
 00000060  17 00 18 00 19 00 0b 00  02 01 00 00 0d 00 0a 00  |................|
-00000070  08 04 01 04 03 02 01 02  03 ff 01 00 01 00        |..............|
+00000070  08 04 01 04 03 02 01 02  03 ff 01 00 01 00 00 12  |................|
+00000080  00 00                                             |..|
 >>> Flow 2 (server to client)
-00000000  16 03 03 00 59 02 00 00  55 03 03 ef cd 72 a3 35  |....Y...U....r.5|
-00000010  e7 11 9f 67 a4 42 9e 34  03 b4 ab e1 0d 4f a4 09  |...g.B.4.....O..|
-00000020  4e e1 8d 52 d2 d0 0e 0e  f0 7a 74 20 da 3f 9c d8  |N..R.....zt .?..|
-00000030  e3 c6 5c a1 e8 5e a0 48  50 e8 70 aa 96 a7 84 4a  |..\..^.HP.p....J|
-00000040  3a b3 c3 21 24 30 6c 7a  d5 b4 9b 9c c0 09 00 00  |:..!$0lz........|
+00000000  16 03 03 00 59 02 00 00  55 03 03 ee af 52 7b c4  |....Y...U....R{.|
+00000010  c3 fd 78 e4 02 10 21 66  91 e8 be 88 2c 57 60 ef  |..x...!f....,W`.|
+00000020  44 06 ad 74 61 9e 62 cd  12 e9 b8 20 71 18 ff 58  |D..ta.b.... q..X|
+00000030  5c 5b dd 4c dd de 33 43  ac 1f 6f c0 d4 8e c9 40  |\[.L..3C..o....@|
+00000040  34 4a 96 00 4c 53 b4 32  65 17 00 a9 c0 09 00 00  |4J..LS.2e.......|
 00000050  0d ff 01 00 01 00 00 0b  00 04 03 00 01 02 16 03  |................|
 00000060  03 02 0e 0b 00 02 0a 00  02 07 00 02 04 30 82 02  |.............0..|
 00000070  00 30 82 01 62 02 09 00  b8 bf 2d 47 a0 d2 eb f4  |.0..b.....-G....|
@@ -47,24 +48,23 @@
 00000240  13 83 0d 94 06 bb d4 37  7a f6 ec 7a c9 86 2e dd  |.......7z..z....|
 00000250  d7 11 69 7f 85 7c 56 de  fb 31 78 2b e4 c7 78 0d  |..i..|V..1x+..x.|
 00000260  ae cb be 9e 4e 36 24 31  7b 6a 0f 39 95 12 07 8f  |....N6$1{j.9....|
-00000270  2a 16 03 03 00 d8 0c 00  00 d4 03 00 17 41 04 7e  |*............A.~|
-00000280  3b ae 99 3d b7 3b da 7a  44 b1 b3 0d 41 36 c5 47  |;..=.;.zD...A6.G|
-00000290  b2 b9 65 44 79 2a c4 a9  e3 a8 ee 6a 77 3b ee d8  |..eDy*.....jw;..|
-000002a0  ee 11 0a 20 61 9b be 03  54 29 63 b3 fb 91 6f 34  |... a...T)c...o4|
-000002b0  cb ad 6c 5e 00 5f 0a c7  fd 70 d4 d6 de 5a 00 04  |..l^._...p...Z..|
-000002c0  03 00 8b 30 81 88 02 42  00 c2 21 72 c5 61 07 2f  |...0...B..!r.a./|
-000002d0  0e af fd d5 22 43 e5 2e  06 51 29 73 c2 ec 50 34  |...."C...Q)s..P4|
-000002e0  76 ab 67 fe 37 49 68 54  4b 16 d2 7a 4c 04 02 b2  |v.g.7IhTK..zL...|
-000002f0  0a 66 28 fb b5 bf 5b 00  4b dc bf e2 9e 99 a7 0c  |.f(...[.K.......|
-00000300  7c 64 36 79 d6 4e 99 70  5f 97 02 42 01 bb 4b 10  ||d6y.N.p_..B..K.|
-00000310  36 f1 38 c1 42 de e9 68  41 2d 0a 4b 19 eb 3c 6b  |6.8.B..hA-.K..<k|
-00000320  cd 11 3e 20 3f 95 c3 c7  ba 18 0c 4a 6a da 45 77  |..> ?......Jj.Ew|
-00000330  8c 8d f4 01 d3 15 91 3e  64 22 16 bd b5 2a 07 52  |.......>d"...*.R|
-00000340  63 e5 de 0c 22 90 2e 2f  e9 b4 3f ab b8 27 16 03  |c..."../..?..'..|
-00000350  03 00 2e 0d 00 00 26 03  01 02 40 00 1e 06 01 06  |......&...@.....|
-00000360  02 06 03 05 01 05 02 05  03 04 01 04 02 04 03 03  |................|
-00000370  01 03 02 03 03 02 01 02  02 02 03 00 00 0e 00 00  |................|
-00000380  00                                                |.|
+00000270  2a 16 03 03 00 d7 0c 00  00 d3 03 00 17 41 04 bd  |*............A..|
+00000280  9c e8 70 51 83 c4 06 84  7a a6 0d 03 e3 00 57 bd  |..pQ....z.....W.|
+00000290  d4 20 68 3b 96 6d 23 18  66 b3 a5 21 66 ef 99 de  |. h;.m#.f..!f...|
+000002a0  41 77 78 f5 d7 3b 0d fb  0e 87 85 1d 93 3e 2a 40  |Awx..;.......>*@|
+000002b0  fd 2c b0 02 6d 5c e7 97  d6 98 55 ff 38 ed 72 04  |.,..m\....U.8.r.|
+000002c0  03 00 8a 30 81 87 02 41  6d e1 1b f8 7b 7b 00 67  |...0...Am...{{.g|
+000002d0  ed 9d 5d 2d c9 75 b1 41  3b b5 03 e6 b5 7e 9e 1d  |..]-.u.A;....~..|
+000002e0  c9 88 c7 a1 da f8 e9 87  52 8a 37 92 02 89 45 5c  |........R.7...E\|
+000002f0  94 d1 4d 1d 36 a1 f0 79  76 18 d3 43 53 23 2c 3f  |..M.6..yv..CS#,?|
+00000300  41 c9 d9 16 90 5c 98 e6  33 02 42 01 e5 56 d3 3c  |A....\..3.B..V.<|
+00000310  6a d9 4e 78 6d 03 2a 93  f2 b9 3e 39 be 36 61 bb  |j.Nxm.*...>9.6a.|
+00000320  54 3f 3f a7 10 db 31 c6  46 13 d6 6a fb 36 93 23  |T??...1.F..j.6.#|
+00000330  a6 40 28 e0 70 69 6e 3f  2b 75 15 69 4f 30 b8 ea  |.@(.pin?+u.iO0..|
+00000340  96 0c 83 c0 c3 78 69 9c  95 07 79 e6 54 16 03 03  |.....xi...y.T...|
+00000350  00 2e 0d 00 00 26 03 01  02 40 00 1e 06 01 06 02  |.....&...@......|
+00000360  06 03 05 01 05 02 05 03  04 01 04 02 04 03 03 01  |................|
+00000370  03 02 03 03 02 01 02 02  02 03 00 00 0e 00 00 00  |................|
 >>> Flow 3 (client to server)
 00000000  16 03 03 01 fb 0b 00 01  f7 00 01 f4 00 01 f1 30  |...............0|
 00000010  82 01 ed 30 82 01 58 a0  03 02 01 02 02 01 00 30  |...0..X........0|
@@ -103,31 +103,31 @@
 00000220  a7 24 20 3e b2 56 1c ce  97 28 5e f8 2b 2d 4f 9e  |.$ >.V...(^.+-O.|
 00000230  f1 07 9f 6c 4b 5b 83 56  e2 32 42 e9 58 b6 d7 49  |...lK[.V.2B.X..I|
 00000240  a6 b5 68 1a 41 03 56 6b  dc 5a 89 16 03 03 00 88  |..h.A.Vk.Z......|
-00000250  0f 00 00 84 04 01 00 80  07 7e 14 14 83 b9 d9 52  |.........~.....R|
-00000260  fd db c0 a4 79 37 b7 91  0b bb d6 ab d0 d1 c8 2e  |....y7..........|
-00000270  35 5b 58 3f ce 6b f6 a9  01 95 34 a9 8b da 6b 23  |5[X?.k....4...k#|
-00000280  b7 99 11 75 3e f8 db bc  ab 9b d4 8f 4f 89 12 d9  |...u>.......O...|
-00000290  2d 18 0e 54 2d 61 ff 9a  0e 3d 50 66 1d c2 e0 f6  |-..T-a...=Pf....|
-000002a0  4d 65 ca e2 08 af 29 cf  6d ab 63 72 ad 7c 03 a1  |Me....).m.cr.|..|
-000002b0  1e a1 f4 75 f5 54 58 28  3b 7d f7 21 d5 67 ec 60  |...u.TX(;}.!.g.`|
-000002c0  3b 59 81 ac f5 9a c6 cb  6a af da 7e 29 c4 c2 68  |;Y......j..~)..h|
-000002d0  53 34 aa b8 0e 58 61 24  14 03 03 00 01 01 16 03  |S4...Xa$........|
+00000250  0f 00 00 84 04 01 00 80  2a a8 4b 5b 57 08 92 95  |........*.K[W...|
+00000260  cd a7 5d 95 18 2e 2e ef  83 84 bf 7c c2 ae 44 16  |..]........|..D.|
+00000270  bc 51 ec 00 ae a0 1d 1b  0c 59 d6 0d 22 7f 12 bd  |.Q.......Y.."...|
+00000280  c6 ed 8f 71 51 9c 56 2a  10 fe 9d 22 c6 ae 8f 14  |...qQ.V*..."....|
+00000290  1e b1 a6 0b f2 14 38 6d  7f 52 4a 7b 3b 56 84 8f  |......8m.RJ{;V..|
+000002a0  08 56 e8 07 ff 10 79 41  3b e5 ed 1e 67 db 9c 9f  |.V....yA;...g...|
+000002b0  c2 01 e7 c1 56 8f bf 27  02 f9 8a 4f cb 02 24 39  |....V..'...O..$9|
+000002c0  7e c4 c7 02 62 42 72 c4  7a eb ce d3 48 72 7e 6d  |~...bBr.z...Hr~m|
+000002d0  40 0e d6 ea 6f 6f 11 bb  14 03 03 00 01 01 16 03  |@...oo..........|
 000002e0  03 00 40 00 00 00 00 00  00 00 00 00 00 00 00 00  |..@.............|
-000002f0  00 00 00 a4 af 4b 95 ec  53 cf 49 8d b4 6c e0 3b  |.....K..S.I..l.;|
-00000300  76 60 23 9b 2a f3 2c 12  61 18 cf 56 7c 1d 8c 01  |v`#.*.,.a..V|...|
-00000310  a8 bb 19 4d 1f ff ff 73  a2 90 e5 87 7b 85 d3 1b  |...M...s....{...|
-00000320  74 6d 36                                          |tm6|
+000002f0  00 00 00 4a 5f 25 86 84  c5 50 31 5c 96 ae dc 56  |...J_%...P1\...V|
+00000300  de 30 a3 39 8d 82 e9 5a  fa bb a9 64 ec 63 16 55  |.0.9...Z...d.c.U|
+00000310  2f 2d ac f2 cb 38 b0 47  d0 b3 54 0e be 01 4d 7f  |/-...8.G..T...M.|
+00000320  57 4c 62                                          |WLb|
 >>> Flow 4 (server to client)
-00000000  14 03 03 00 01 01 16 03  03 00 40 fb 28 05 0a 99  |..........@.(...|
-00000010  61 d1 c7 52 a7 9e 95 a5  c1 11 3c 81 ee f2 b8 68  |a..R......<....h|
-00000020  a6 35 e2 7e bb 3c e7 7b  61 72 08 29 3a a5 e9 d3  |.5.~.<.{ar.):...|
-00000030  39 9c d2 0f 38 12 9b 92  79 36 58 bc f3 23 85 76  |9...8...y6X..#.v|
-00000040  1c 7b 6c 49 0c bc 00 61  20 1b ff                 |.{lI...a ..|
+00000000  14 03 03 00 01 01 16 03  03 00 40 ae da 9b fe 9c  |..........@.....|
+00000010  ce f2 2c 5a 44 68 8b 1c  fc d6 6b 7c 63 bf dd 18  |..,ZDh....k|c...|
+00000020  8e 4a 1e bd 24 3f 60 1f  e8 26 2b a2 a0 2e f1 8f  |.J..$?`..&+.....|
+00000030  b2 a7 a9 eb f0 17 4a a7  79 e4 ae 6b 12 ba 7e c5  |......J.y..k..~.|
+00000040  1d 8f 10 46 cd 47 9a e6  35 46 8f                 |...F.G..5F.|
 >>> Flow 5 (client to server)
 00000000  17 03 03 00 30 00 00 00  00 00 00 00 00 00 00 00  |....0...........|
-00000010  00 00 00 00 00 fa f6 0b  1f f6 28 c7 4c 6c c8 8d  |..........(.Ll..|
-00000020  9c 97 5f 3d 22 bb 45 fc  07 ae 3a 7e 74 01 7c 71  |.._=".E...:~t.|q|
-00000030  39 45 15 d3 c7 15 03 03  00 30 00 00 00 00 00 00  |9E.......0......|
-00000040  00 00 00 00 00 00 00 00  00 00 a1 43 03 79 a4 4e  |...........C.y.N|
-00000050  bd 0f 17 c4 d0 29 1a 8a  dd 7b e7 48 3c e4 4b 8a  |.....)...{.H<.K.|
-00000060  53 3d 1d 18 f9 05 fd 4b  73 4a                    |S=.....KsJ|
+00000010  00 00 00 00 00 bf 73 92  0b 5d 45 c3 0f 23 f0 8f  |......s..]E..#..|
+00000020  35 a1 96 f6 5b 32 4d 2a  a7 4e da 47 f1 4d 3f 39  |5...[2M*.N.G.M?9|
+00000030  7b 72 06 86 ca 15 03 03  00 30 00 00 00 00 00 00  |{r.......0......|
+00000040  00 00 00 00 00 00 00 00  00 00 dc 0f ca 4c 33 ef  |.............L3.|
+00000050  56 e6 93 69 26 08 e4 d9  43 9f d7 cd d7 69 eb 5f  |V..i&...C....i._|
+00000060  c7 af 4a b7 73 52 0e 66  10 e5                    |..J.sR.f..|