move the version field in front of the packet number in the long header

add a -tls flag to the example client and server

No functional change expected.

This will add the WIP TLS version as the preferred supported version. It
is intended for develop...

The negotiated_version parameter was recently moved from the
client_hello TLS handshake message ...

We're not sending the initial_max_stream_id_uni parameter, which
implicitely sets this value to ...

The draft was recently changed to make this value optional.

This was needed before QUIC 39, and should have been removed when we
dropped support for QUIC 38.

This was recently changed in the IETF draft.

add a string representation for the Long Header packet types

Make error chan not block for a single write

rename the Cleartext Long Header type to Handshake

This was recently changed in the draft.

fix parsing of the Header type byte

In order to determine if a packet is a Version Negotiation Packet, it is
not sufficient to just ...

echo the offered version in IETF Version Negotiation Packets

reject ACKs that ack packets with a higher encryption level

fix encoding of the idle timeout for the TLS transport parameters

parse the packet header before getting the session from the session map

accept Public Resets without the RSEQ tag

The RSEQ tag is mandatory according to the gQUIC spec, however, Google
doesn't include that tag ...

fix flaky proxy shutdown test

fix race condition when closing the server

drop support for QUIC 37 and 38

add more integration tests for the handshake

use stream 0 for the crypto stream when using TLS

This depends on the version. In gQUIC, stream 1 and 3 don't contribute,
in IETF QUIC only stream...

CONGESTION_FEEDBACK was reserved for future use in gQUIC, but has never
actually been implemente...

For gQUIC WINDOW_UPDATEs are converted to MAX_DATA and MAX_STREAM_DATA,
respectively.

improve closing of the server

Closing the sessions can be done concurrently.

send initial version in the CHLO, not the current version

This commit fixes two bugs:
1. In the CHLO, we need to send the initial QUIC version. It will di...

fix client handshake failure when the server supports unknown versions

reject packets that use the wrong or unknown packet types

fix logging of unparseable PUBLIC_RESETs

rename the packet types according to recent draft changes

only use little endian byte order for gQUIC 37 and 38

implement the TLS Cookie extension

That way, when adding new non-gQUIC versions, they will use big endian.

fix Chrome tests on Travis, remove test retries

This was the reason the Chrome integration tests have been failing
recently.

fix gQUIC version numbers

handle IETF draft style Version Negotiation Packets

fix the exponential backoff when sending handshake retransmissions

send IETF draft style version negotiation packets

Send a gQUIC Version Negotiation Packet, if the client packet has a
Public Header. If the client...

set the Long Header type

encrypt unprotected packets with a connection-dependent key

make version numbers consistent with the IETF draft

This makes the version number representation consistent with the IETF
draft.

implement the IETF draft Header

make flow control stricter when receiving final offsets

update CIs to Go 1.9.2

According to the IETF draft, the only packet number lengths are 1, 2 and
4 bytes. With the given...

This could happen when a peer send a STREAM frame with the Fin bit set,
and then sends STREAM fr...

remove the prioritisation of the H2 header stream

This was an optimization for H2/QUIC, which always violated the QUIC
layering. The H2 header str...

handle the crypto stream separately

The crypto stream is opened during the session setup. Passing it to the
crypto setup directly he...

remove the flow control manager

fix parsing of long reason phrases in CONNECTION_CLOSE frames