tls

package

Go to main page

Versions in this module

v0

v0.6.0

Apr 12, 2024

Changes in this version

+ const QUICEncryptionLevelApplication

+ const QUICEncryptionLevelEarly

+ const QUICEncryptionLevelHandshake

+ const QUICEncryptionLevelInitial

+ func VersionName(version uint16) string

+ type AlertError uint8

+ func (e AlertError) Error() string

type ClientSessionState

+ func NewResumptionState(ticket []byte, state *SessionState) (*ClientSessionState, error)

+ func (cs *ClientSessionState) ResumptionState() (ticket []byte, state *SessionState, err error)

type Config

+ UnwrapSession func(identity []byte, cs ConnectionState) (*SessionState, error)

+ WrapSession func(ConnectionState, *SessionState) ([]byte, error)

+ func (c *Config) DecryptTicket(identity []byte, cs ConnectionState) (*SessionState, error)

+ func (c *Config) EncryptTicket(cs ConnectionState, ss *SessionState) ([]byte, error)

+ type QUICConfig struct

+ TLSConfig *Config

+ type QUICConn struct

+ func QUICClient(config *QUICConfig) *QUICConn

+ func QUICServer(config *QUICConfig) *QUICConn

+ func (q *QUICConn) Close() error

+ func (q *QUICConn) ConnectionState() ConnectionState

+ func (q *QUICConn) HandleData(level QUICEncryptionLevel, data []byte) error

+ func (q *QUICConn) NextEvent() QUICEvent

+ func (q *QUICConn) SendSessionTicket(opts QUICSessionTicketOptions) error

+ func (q *QUICConn) SetTransportParameters(params []byte)

+ func (q *QUICConn) Start(ctx context.Context) error

+ type QUICEncryptionLevel int

+ func (l QUICEncryptionLevel) String() string

+ type QUICEvent struct

+ Data []byte

+ Kind QUICEventKind

+ Level QUICEncryptionLevel

+ Suite uint16

+ type QUICEventKind int

+ const QUICHandshakeDone

+ const QUICNoEvent

+ const QUICRejectedEarlyData

+ const QUICSetReadSecret

+ const QUICSetWriteSecret

+ const QUICTransportParameters

+ const QUICTransportParametersRequired

+ const QUICWriteData

+ type QUICSessionTicketOptions struct

+ EarlyData bool

+ type SessionState struct

+ EarlyData bool

+ Extra [][]byte

+ func ParseSessionState(data []byte) (*SessionState, error)

+ func (s *SessionState) Bytes() ([]byte, error)

v0.5.8

Mar 22, 2024

v0.5.7

Dec 12, 2023

v0.5.6

Nov 22, 2023

v0.5.5

Oct 11, 2023

v0.5.4

Oct 4, 2023

v0.5.3

Jul 18, 2023

v0.5.2

Jun 8, 2023

v0.5.1

May 29, 2023

v0.5.0

May 29, 2023

Changes in this version

+ type CertificateVerificationError struct

+ Err error

+ UnverifiedCertificates []*x509.Certificate

+ func (e *CertificateVerificationError) Error() string

+ func (e *CertificateVerificationError) Unwrap() error

v0.4.4

Jun 8, 2023

v0.4.3

May 31, 2023

v0.4.2

Feb 16, 2023

v0.4.1

Jan 16, 2023

v0.4.0

Jan 5, 2023

v0.3.0

Jan 5, 2023

v0.2.1

Aug 19, 2022

v0.2.0

Aug 19, 2022

v0.1.2

Sep 7, 2022

v0.1.1

Aug 22, 2022

v0.1.0

Jun 2, 2022

Changes in this version

+ const TLS_AES_128_GCM_SHA256

+ const TLS_AES_256_GCM_SHA384

+ const TLS_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

+ const TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_RSA_WITH_RC4_128_SHA

+ const TLS_FALLBACK_SCSV

+ const TLS_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_RSA_WITH_AES_128_CBC_SHA

+ const TLS_RSA_WITH_AES_128_CBC_SHA256

+ const TLS_RSA_WITH_AES_128_GCM_SHA256

+ const TLS_RSA_WITH_AES_256_CBC_SHA

+ const TLS_RSA_WITH_AES_256_GCM_SHA384

+ const TLS_RSA_WITH_RC4_128_SHA

+ const VersionSSL30

+ const VersionTLS10

+ const VersionTLS11

+ const VersionTLS12

+ const VersionTLS13

+ var ErrIncompatibleStdlibConfig = errors.New("ootls: incompatible stdlib config")

+ func CipherSuiteName(id uint16) string

+ func Listen(network, laddr string, config *Config) (net.Listener, error)

+ func NewListener(inner net.Listener, config *Config) net.Listener

+ type Certificate struct

+ Certificate [][]byte

+ Leaf *x509.Certificate

+ OCSPStaple []byte

+ PrivateKey crypto.PrivateKey

+ SignedCertificateTimestamps [][]byte

+ SupportedSignatureAlgorithms []SignatureScheme

+ func LoadX509KeyPair(certFile, keyFile string) (Certificate, error)

+ func X509KeyPair(certPEMBlock, keyPEMBlock []byte) (Certificate, error)

+ type CertificateRequestInfo struct

+ AcceptableCAs [][]byte

+ SignatureSchemes []SignatureScheme

+ Version uint16

+ func (c *CertificateRequestInfo) Context() context.Context

+ func (cri *CertificateRequestInfo) SupportsCertificate(c *Certificate) error

+ type CipherSuite struct

+ ID uint16

+ Insecure bool

+ Name string

+ SupportedVersions []uint16

+ func CipherSuites() []*CipherSuite

+ func InsecureCipherSuites() []*CipherSuite

+ type ClientAuthType int

+ const NoClientCert

+ const RequestClientCert

+ const RequireAndVerifyClientCert

+ const RequireAnyClientCert

+ const VerifyClientCertIfGiven

+ func (i ClientAuthType) String() string

+ type ClientHelloInfo struct

+ CipherSuites []uint16

+ Conn net.Conn

+ ServerName string

+ SignatureSchemes []SignatureScheme

+ SupportedCurves []CurveID

+ SupportedPoints []uint8

+ SupportedProtos []string

+ SupportedVersions []uint16

+ func (c *ClientHelloInfo) Context() context.Context

+ func (chi *ClientHelloInfo) SupportsCertificate(c *Certificate) error

+ type ClientSessionCache interface

+ Get func(sessionKey string) (session *ClientSessionState, ok bool)

+ Put func(sessionKey string, cs *ClientSessionState)

+ func NewLRUClientSessionCache(capacity int) ClientSessionCache

+ type ClientSessionState struct

+ type Config struct

+ Certificates []Certificate

+ CipherSuites []uint16

+ ClientAuth ClientAuthType

+ ClientCAs *x509.CertPool

+ ClientSessionCache ClientSessionCache

+ CurvePreferences []CurveID

+ DynamicRecordSizingDisabled bool

+ GetCertificate func(*ClientHelloInfo) (*Certificate, error)

+ GetClientCertificate func(*CertificateRequestInfo) (*Certificate, error)

+ GetConfigForClient func(*ClientHelloInfo) (*Config, error)

+ InsecureSkipVerify bool

+ KeyLogWriter io.Writer

+ MaxVersion uint16

+ MinVersion uint16

+ NameToCertificate map[string]*Certificate

+ NextProtos []string

+ PreferServerCipherSuites bool

+ Rand io.Reader

+ Renegotiation RenegotiationSupport

+ RootCAs *x509.CertPool

+ ServerName string

+ SessionTicketKey [32]byte

+ SessionTicketsDisabled bool

+ Time func() time.Time

+ VerifyConnection func(ConnectionState) error

+ VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error

+ func (c *Config) BuildNameToCertificate()

+ func (c *Config) Clone() *Config

+ func (c *Config) SetSessionTicketKeys(keys [][32]byte)

+ type Conn struct

+ func Client(conn net.Conn, config *Config) *Conn

+ func Dial(network, addr string, config *Config) (*Conn, error)

+ func DialWithDialer(dialer *net.Dialer, network, addr string, config *Config) (*Conn, error)

+ func Server(conn net.Conn, config *Config) *Conn

+ func (c *Conn) Close() error

+ func (c *Conn) CloseWrite() error

+ func (c *Conn) ConnectionState() ConnectionState

+ func (c *Conn) Handshake() error

+ func (c *Conn) HandshakeContext(ctx context.Context) error

+ func (c *Conn) LocalAddr() net.Addr

+ func (c *Conn) NetConn() net.Conn

+ func (c *Conn) OCSPResponse() []byte

+ func (c *Conn) Read(b []byte) (int, error)

+ func (c *Conn) RemoteAddr() net.Addr

+ func (c *Conn) SetDeadline(t time.Time) error

+ func (c *Conn) SetReadDeadline(t time.Time) error

+ func (c *Conn) SetWriteDeadline(t time.Time) error

+ func (c *Conn) VerifyHostname(host string) error

+ func (c *Conn) Write(b []byte) (int, error)

+ type ConnStdlib struct

+ func NewClientConnStdlib(conn net.Conn, config *stdlibtls.Config) (*ConnStdlib, error)

+ func (c *ConnStdlib) ConnectionState() stdlibtls.ConnectionState

+ type ConnectionState struct

+ CipherSuite uint16

+ DidResume bool

+ HandshakeComplete bool

+ NegotiatedProtocol string

+ NegotiatedProtocolIsMutual bool

+ OCSPResponse []byte

+ PeerCertificates []*x509.Certificate

+ ServerName string

+ SignedCertificateTimestamps [][]byte

+ TLSUnique []byte

+ VerifiedChains [][]*x509.Certificate

+ Version uint16

+ func (cs *ConnectionState) ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error)

+ type CurveID uint16

+ const CurveP256

+ const CurveP384

+ const CurveP521

+ const X25519

+ func (i CurveID) String() string

+ type Dialer struct

+ Config *Config

+ NetDialer *net.Dialer

+ func (d *Dialer) Dial(network, addr string) (net.Conn, error)

+ func (d *Dialer) DialContext(ctx context.Context, network, addr string) (net.Conn, error)

+ type RecordHeaderError struct

+ Conn net.Conn

+ Msg string

+ RecordHeader [5]byte

+ func (e RecordHeaderError) Error() string

+ type RenegotiationSupport int

+ const RenegotiateFreelyAsClient

+ const RenegotiateNever

+ const RenegotiateOnceAsClient

+ type SignatureScheme uint16

+ const ECDSAWithP256AndSHA256

+ const ECDSAWithP384AndSHA384

+ const ECDSAWithP521AndSHA512

+ const ECDSAWithSHA1

+ const Ed25519

+ const PKCS1WithSHA1

+ const PKCS1WithSHA256

+ const PKCS1WithSHA384

+ const PKCS1WithSHA512

+ const PSSWithSHA256

+ const PSSWithSHA384

+ const PSSWithSHA512

+ func (i SignatureScheme) String() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL