sync: merge changes from go 1.25.0#370

Open

wwqgtxx wants to merge 35 commits intorefraction-networking:masterfrom

wwqgtxx:sync-go1.25

Commits on Sep 21, 2025

crypto/tls: fix incorrect EncryptedClientHelloKey comment

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: improve ech parsing errors

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: reject empty TLS 1.3 session ticket

cpu
authored and
wwqgtxx
committed
crypto/tls: ignore TLS 1.3 user canceled alerts

cpu
authored and
wwqgtxx
committed
crypto/tls: align cert decode alert w/ BSSL

cpu
authored and
wwqgtxx
committed
crypto/tls: reject TLS 1.3 compat session ID in TLS 1.2

cpu
authored and
wwqgtxx
committed
crypto/tls: allow P-521 in FIPS 140-3 mode and Go+BoringCrypto

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: add ConnectionState.CurveID

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: clean up supported/default/allowed parameters

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: relax native FIPS 140-3 mode

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: fix ECH compatibility

gdy666
authored and
wwqgtxx
committed
crypto/tls: add missing RUnlock in ticketKeys

espadolini
authored and
wwqgtxx
committed
crypto/tls: use crypto/hkdf

qmuntal
authored and
wwqgtxx
committed
crypto/tls: add offered cipher suites to the handshake error

drakkan
authored and
wwqgtxx
committed
crypto/tls: fix a testing deadlock that occurs on a TLS protocol error

eay
authored and
wwqgtxx
committed
crypto/tls: skip part of the test based on GOOS instead of GOARCH

nevkontakte
authored and
wwqgtxx
committed
crypto/tls: add scheduler call to TestCertCache refcount timeout loop

mknyszek
authored and
wwqgtxx
committed
crypto/tls: use runtime.Gosched instead of time.After in TestCertCache

mknyszek
authored and
wwqgtxx
committed
crypto/tls: use illegal param alert for bad compression

cpu
authored and
wwqgtxx
committed
crypto/tls: update TLS 1.3 client compression validation

cpu
authored and
wwqgtxx
committed
crypto/tls: err for unsupported point format configs

cpu
authored and
wwqgtxx
committed
crypto/tls: fix TLS <1.3 client cert required alert

cpu
authored and
wwqgtxx
committed
crypto/tls: handle client hello version too high

cpu
authored and
wwqgtxx
committed
crypto/tls: add GetEncryptedClientHelloKeys

rolandshoemaker
authored and
wwqgtxx
committed
crypto/tls: have servers prefer TLS 1.3 when supported

cpu
authored and
wwqgtxx
committed
crypto/tls: verify server chooses advertised curve

cpu
authored and
wwqgtxx
committed
crypto/tls: delete dead code curveIDForCurve

cpu
authored and
wwqgtxx
committed
crypto/tls: match compression method alert across versions

cpu
authored and
wwqgtxx
committed
crypto/tls: don't advertise TLS 1.2-only sigAlgs in TLS 1.3

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: use decode alert for handshake msg unmarshal err

cpu
authored and
wwqgtxx
committed
crypto/tls: reject duplicate TLS 1.3 EncryptedExtensions

cpu
authored and
wwqgtxx
committed
crypto/tls: signature_algorithms in CertificateRequest can't be empty

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: enable signature algorithm BoGo tests (and fix two bugs)

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: ensure the ECDSA curve matches the signature algorithm

FiloSottile
authored and
wwqgtxx
committed
crypto/tls: empty server_name conf. ext. from server

cpu
authored and
wwqgtxx
committed