why Package tls partially implements TLS 1.2?

315 views
Skip to first unread message

luo...@gmail.com

unread,
Feb 12, 2015, 7:48:17 PM2/12/15
to golan...@googlegroups.com
Hi all
    why Package tls partially implements TLS 1.2? how can see the list that it didn't implement?  
    can package tls applied in our online product envirement?   whah't the feature difference  with openssl?
    
    package tls can do handshake with ssl3.0 and tls1.0, 1.1 successfully, but i'm not sure whether it has any problem.because package tls declared that it partially implements TLS 1.2.
    does golang have any plan to support ssl3.0, tls1.0, 1.1 ? 

Adam Langley

unread,
Feb 12, 2015, 8:13:19 PM2/12/15
to luo...@gmail.com, golang-dev
On Thu, Feb 12, 2015 at 4:48 PM, <luo...@gmail.com> wrote:
> Hi all
> why Package tls partially implements TLS 1.2? how can see the list that
> it didn't implement?

(This email should really have been sent to golang-nuts, not -dev.)

TLS is a huge specification; everyone only implements bits of it. The
package probably implements all that you need given that it works for
most people.

A few things that aren't supported: SSLv2 format handshakes,
renegotiation, session ID resumption.

> does golang have any plan to support ssl3.0, tls1.0, 1.1 ?

SSLv3, TLS 1.0 and 1.1 are also supported, although SSLv3 is/will be
disabled by default for clients.


Cheers

AGL

luo...@gmail.com

unread,
Feb 14, 2015, 6:32:24 AM2/14/15
to golan...@googlegroups.com, luo...@gmail.com
thanks for your reply, it is very helpful for me .
sorry for posting it on golang-dev. i did post it on golang-nuts but nobody gave me a right answer. ^_^. 


在 2015年2月13日星期五 UTC+8上午9:13:19,agl写道:
Reply all
Reply to author
Forward
0 new messages