ktls

Documentation

Index

• Variables
• func DeriveTLS12Keys(masterSecret, clientRandom, serverRandom []byte, suite uint16) (tls12Keys, error)
• func DeriveTLS13Keys(clientSecret, serverSecret []byte, suite uint16) (tls13Keys, error)
• func DrainClientTickets(tc *tls.Conn, conn net.Conn) []byte
• func EnableKTLS(fd int, isClient bool, suite uint16, keys tls12Keys, inSeq, outSeq uint64) error
• func EnableKTLS13(fd int, isClient bool, suite uint16, keys tls13Keys, inSeq, outSeq [8]byte) error
• func IsKTLSCipher(suite uint16) bool
• func NewKeyLogWriter(dst io.Writer) *keyLogWriter
• func NewRecordConn(conn net.Conn) *recordConn
• func PrepareKTLSConfig(cfg *tls.Config, klw *keyLogWriter) *tls.Config
• func TLSConnRecSeq(tc *tls.Conn) (inSeq, outSeq [8]byte, ok bool)
• type KeyLogWriter
• type RecordConn
• type TLS12Keys
• type TLS13Keys

Variables

var KTLSClientPostHandshakeReadMaxBytes = 64 * 1024

KTLSClientPostHandshakeReadMaxBytes caps buffered app data during ticket drain.

var KTLSClientPostHandshakeTimeout = 10 * time.Millisecond

KTLSClientPostHandshakeTimeout is the max time to wait for TLS1.3 tickets.

var KTLSDisableSessionTickets = false

KTLSDisableSessionTickets disables TLS session tickets when kTLS is enabled.

var KTLSEnableRX = false

KTLSEnableRX controls whether kTLS RX is enabled.

var KTLSForceTLS13AESGCM = true

KTLSForceTLS13AESGCM restricts TLS1.3 cipher suites to AES-GCM.

var KTLSPreferTLS12IfNoAESGCM = true

KTLSPreferTLS12IfNoAESGCM forces TLS1.2 when client doesn't advertise TLS1.3 AES-GCM.

Functions

func DeriveTLS12Keys

func DeriveTLS12Keys(masterSecret, clientRandom, serverRandom []byte, suite uint16) (tls12Keys, error)

func DeriveTLS13Keys

func DeriveTLS13Keys(clientSecret, serverSecret []byte, suite uint16) (tls13Keys, error)

func DrainClientTickets

func DrainClientTickets(tc *tls.Conn, conn net.Conn) []byte

func EnableKTLS

func EnableKTLS(fd int, isClient bool, suite uint16, keys tls12Keys, inSeq, outSeq uint64) error

func EnableKTLS13

func EnableKTLS13(fd int, isClient bool, suite uint16, keys tls13Keys, inSeq, outSeq [8]byte) error

func IsKTLSCipher

func IsKTLSCipher(suite uint16) bool

func NewKeyLogWriter

func NewKeyLogWriter(dst io.Writer) *keyLogWriter

func NewRecordConn

func NewRecordConn(conn net.Conn) *recordConn

func PrepareKTLSConfig

func PrepareKTLSConfig(cfg *tls.Config, klw *keyLogWriter) *tls.Config

func TLSConnRecSeq

func TLSConnRecSeq(tc *tls.Conn) (inSeq, outSeq [8]byte, ok bool)

Types

type KeyLogWriter

type KeyLogWriter = keyLogWriter

type RecordConn

type RecordConn = recordConn

type TLS12Keys

type TLS12Keys = tls12Keys

type TLS13Keys

type TLS13Keys = tls13Keys