maybetls

Documentation

Overview

Package maybetls implements a net.Listener wrapper that handles both secure (TLS) and insecure (cleartext) connections.

The heuristic is very simple: the first byte of the stream is read. If it is ASCII SYN (22 dec, 0x16 hex), the connection is wrapped by crypto/tls.Server. Otherwise, the connection is returned as-is. The connection is always wrapped to allow re-reading of the first byte.

This package will not work if the first byte a client sends can be ASCII SYN in the cleartext protocol.

Index

• func Conn(c net.Conn, config *tls.Config) (net.Conn, error)
• func Listener(ln net.Listener, config *tls.Config) net.Listener

Functions

func Conn

func Conn(c net.Conn, config *tls.Config) (net.Conn, error)

Conn returns a net.Conn that is wrapped by the crypto/tls.Server function if a heursitic is satisfied. See the package documentation for more details.

func Listener

func Listener(ln net.Listener, config *tls.Config) net.Listener

Listener returns a net.Listener that calls the Conn function in this package on accepted connections.