crypto/tls: extend coverage of BoGo test suite

[cpu]

In #51434 a shim for the BoringSSL BoGo test suite, and a unit test to drive it, were added to crypto/tls. See bogo_shim_test.go. To limit the scope of that initial work many tests were disabled in the associated JSON config.

To maximize the value of this test shim we should work through this list and either provide a clear reason for why skipping the test makes sense based on some additional context (missing features, protocol ambiguity, etc) or implement the required fixes to enable the test.

[gopherbot]

Change https://go.dev/cl/650715 mentions this issue: crypto/tls: small bogo shim test tidying

[gopherbot]

Change https://go.dev/cl/650735 mentions this issue: crypto/tls: reject empty TLS13 session ticket

[gopherbot]

Change https://go.dev/cl/650735 mentions this issue: crypto/tls: reject empty TLS 1.3 session ticket

[gopherbot]

Change https://go.dev/cl/650736 mentions this issue: crypto/tls: run SkipNewSessionTicket bogo test

[gopherbot]

Change https://go.dev/cl/650716 mentions this issue: crypto/tls: ignore TLS 1.3 user canceled alerts

[gabyhelp]

Related Issues

• crypto/tls: run BoringSSL test suite (BoGo) #51434 (closed)

Related Code Changes

• crypto/tls: add a bogo shim
• crypto/tls: add a BoringSSL test suite (BoGo) integration
• crypto/tls: add -expect-certificate-types flag to bogo_shim_test
• crypto/tls: add support for -expect-no-hrr to bogo_shim_test
• crypto/tls: add support for cipher flags to bogo_shim_test
• crypto/tls: support signed cert timestamps flags in bogo_shim_test
• crypto/tls: add exclude tls flags to bogo_shim_test

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}

[gopherbot]

Change https://go.dev/cl/650737 mentions this issue: crypto/tls: support bogo -wait-for-debugger

[gopherbot]

Change https://go.dev/cl/650717 mentions this issue: crypto/tls: update GREASE-Server-TLS13 BoGo skip

[gopherbot]

Change https://go.dev/cl/652995 mentions this issue: crypto/tls: align cert decode alert w/ BSSL

[gopherbot]

Change https://go.dev/cl/650738 mentions this issue: crypto/tls: add support for cipher flags to bogo_shim_test

[gopherbot]

Change https://go.dev/cl/652997 mentions this issue: crypto/tls: reject TLS 1.3 compat session ID in TLS 1.2