Add TLS 1.3 record layer to go implementation.
This implements the cipher suite constraints in "fake TLS 1.3". It also makes
bssl_shim and runner enable it by default so we can start adding MaxVersion:
VersionTLS12 markers to tests as 1.2 vs. 1.3 differences begin to take effect.
Change-Id: If1caf6e43938c8d15b0a0f39f40963b8199dcef5
Reviewed-on: https://boringssl-review.googlesource.com/8340
Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/ssl/test/runner/prf.go b/ssl/test/runner/prf.go
index f1b26de..1bfe84c 100644
--- a/ssl/test/runner/prf.go
+++ b/ssl/test/runner/prf.go
@@ -130,7 +130,11 @@
return prf30
case VersionTLS10, VersionTLS11:
return prf10
- case VersionTLS12:
+ // TODO(nharper): VersionTLS13 is in the case statement below only to
+ // support Fake TLS 1.3. Real TLS 1.3 should never call this function.
+ // Once we no longer support Fake TLS 1.3, the VersionTLS13 should be
+ // removed from this case statement.
+ case VersionTLS12, VersionTLS13:
if suite.flags&suiteSHA384 != 0 {
return prf12(sha512.New384)
}
