tls

Documentation

Overview

Package tls contains definitions and methods related to tags parsed from the TLS handshake

Index

• Constants
• Variables
• type Tags
  • func (t *Tags) GetDynamicTags() map[string]struct{}
  • func (t *Tags) IsEmpty() bool
  • func (t *Tags) MergeWith(that Tags)
  • func (t *Tags) String() string

Constants

const (
	TagTLSVersion       = "tls.version:"
	TagTLSCipherSuiteID = "tls.cipher_suite_id:"
	TagTLSClientVersion = "tls.client_version:"
)

Constants for tag keys

const (
	OfferedTLSVersion10 uint8 = 0x01
	OfferedTLSVersion11 uint8 = 0x02
	OfferedTLSVersion12 uint8 = 0x04
	OfferedTLSVersion13 uint8 = 0x08
)

Bitmask constants for Offered_versions matching kernelspace definitions

Variables

var ClientVersionTags = map[uint16]string{
	tls.VersionTLS10: TagTLSClientVersion + version10,
	tls.VersionTLS11: TagTLSClientVersion + version11,
	tls.VersionTLS12: TagTLSClientVersion + version12,
	tls.VersionTLS13: TagTLSClientVersion + version13,
}

ClientVersionTags maps TLS versions to tag names for client offered versions (exported for testing)

var VersionTags = map[uint16]string{
	tls.VersionTLS10: TagTLSVersion + version10,
	tls.VersionTLS11: TagTLSVersion + version11,
	tls.VersionTLS12: TagTLSVersion + version12,
	tls.VersionTLS13: TagTLSVersion + version13,
}

VersionTags maps TLS versions to tag names for server chosen version (exported for testing)

Types

type Tags

type Tags struct {
	ChosenVersion   uint16
	CipherSuite     uint16
	OfferedVersions uint8
}

Tags holds the TLS tags. It is used to store the TLS version, cipher suite and offered versions. We can't use the struct from eBPF as the definition is shared with windows.

func (*Tags) GetDynamicTags

func (t *Tags) GetDynamicTags() map[string]struct{}

GetDynamicTags generates dynamic tags based on TLS information

func (*Tags) IsEmpty

func (t *Tags) IsEmpty() bool

IsEmpty returns true if all fields are zero

func (*Tags) MergeWith

func (t *Tags) MergeWith(that Tags)

MergeWith merges the tags from another Tags struct into this one

func (*Tags) String

func (t *Tags) String() string

String returns a string representation of the Tags struct