policy

May 17, 2026

Changes in this version

+ const CheckForbiddenALPN

+ const CheckForbiddenTLS

+ const CheckMinCertDays

+ const CheckMinCertKeyBits

+ const CheckRequiredALPN

+ const CheckRequiredTLS

+ func ParseALPNProtocols(value string) []string

+ func ParseTLSVersions(value string) ([]uint16, error)

type Config

+ ForbiddenALPNProtocols []string

+ ForbiddenTLSVersions []uint16

+ MinCertificateKeyBits int

+ MinCertificateValidityDays int

+ RequiredALPNProtocols []string

+ RequiredTLSVersions []uint16

May 17, 2026

Changes in this version

+ func RequiresCipherProbe(config Config) bool

May 17, 2026

Changes in this version

+ const CheckExpiredCert

+ const CheckInvalidCert

+ const CheckLegacyTLS

+ const CheckWeakCipher

+ const NameModern

+ const NameNone

+ func ParseFailOn(value string) []string

+ func ValidateConfig(config Config) error

+ type Config struct

+ FailOn []string

+ Name string

+ type Failure struct

+ Check string

+ Message string

+ Version string

+ type Result struct

+ Enabled bool

+ Failures []Failure

+ Name string

+ Passed bool

+ func Evaluate(results []scan.TLSScanResult, config Config, now time.Time) Result