Issue 7758 in go: crypto/tls: add DHE support

[g...@googlecode.com]

Status: New
Owner: ----

New issue 7758 by stalkr: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

ECDHE is supported but not DHE. It would be nice to support it so it could
be added to existing cipher suites.

Server https://developers.databox.com only support DHE ciphers:
DHE-RSA-AES256-GCM-SHA384
DHE-RSA-AES256-SHA256
DHE-RSA-AES256-SHA
DHE-RSA-CAMELLIA256-SHA
DHE-RSA-AES128-GCM-SHA256
DHE-RSA-AES128-SHA256
DHE-RSA-AES128-SHA
DHE-RSA-SEED-SHA

Which makes Go fail: Get https://developers.databox.com: remote error:
handshake failure

Reference: https://groups.google.com/forum/#!topic/golang-nuts/hqm_ssUNUtI

--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[g...@googlecode.com]

Comment #1 on issue 7758 by fr...@runscope.com: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

I'm also seeing errors in the CA chain for

Get https://api.moip.com.br/: x509: certificate signed by unknown authority
(possibly because of "x509: cannot verify signature: algorithm
unimplemented" while trying to verify candidate authority
certificate "COMODO RSA Certification Authority")

It seems like everyone reissuing/updating certificates with the recent
Heartbleed announcement are getting new certificates that aren't fully
supported by crypto/tls.

[g...@googlecode.com]

Comment #2 on issue 7758 by stalkr: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

re #1: as replied on go-nuts this is a separate issue, crypto/sha512 is not
imported by default (see also https://codereview.appspot.com/84700045).

[g...@googlecode.com]

Updates:
Cc: a...@golang.org

Comment #3 on issue 7758 by brad...@golang.org: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

(No comment was entered for this change.)

[g...@googlecode.com]

Comment #4 on issue 7758 by stalkr: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

re #2: crypto/sha512 is now imported by default
https://codereview.appspot.com/87670045

[g...@googlecode.com]

Updates:
Labels: Repo-Main Release-None

Comment #5 on issue 7758 by i...@golang.org: crypto/tls: add DHE support
http://code.google.com/p/go/issues/detail?id=7758

(No comment was entered for this change.)