Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

bfe_tls

package

Go to main page

Versions in this module

v1

v1.6.0

Oct 21, 2022

v1.5.0

Jan 11, 2022

v1.4.0

Dec 10, 2021

v1.3.0

Sep 16, 2021

v1.2.0

Jun 21, 2021

v1.1.0

Apr 8, 2021

Changes in this version

type ConnectionState

+ JA3Hash string

+ JA3Raw string

v1.0.0

Jan 15, 2021

v0

v0.12.0

Sep 3, 2020

v0.11.0

Jul 24, 2020

Changes in this version

+ const GradeA

+ const GradeAPlus

+ const GradeB

+ const GradeC

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

+ const TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_RSA_WITH_RC4_128_SHA

+ const TLS_EMPTY_RENEGOTIATION_INFO_SCSV

+ const TLS_FALLBACK_SCSV

+ const TLS_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_RSA_WITH_AES_128_CBC_SHA

+ const TLS_RSA_WITH_AES_256_CBC_SHA

+ const TLS_RSA_WITH_RC4_128_SHA

+ const TLS_RSA_WITH_SM4_SM3

+ const VersionSSL30

+ const VersionTLS10

+ const VersionTLS11

+ const VersionTLS12

+ func CheckSuiteECDHE(id uint16) bool

+ func CheckSuitePseudo(suite uint16) bool

+ func CheckSuiteRSA(id uint16) bool

+ func CipherSuiteText(suite uint16) string

+ func CipherSuiteTextForOpenSSL(suite uint16) string

+ func CurveForCurveID(id CurveID) (elliptic.Curve, bool)

+ func FilterCiphers(cipherSuites []uint16, filter CipherFilter) ([]uint16, []uint16)

+ func IsEcdheCipherSuite(suite interface{}) bool

+ func Listen(network, laddr string, config *Config) (net.Listener, error)

+ func NewListener(inner net.Listener, config *Config) net.Listener

+ func OcspTimeRangeCheck(parse *ocsp.Response) bool

+ func PKCS5Padding(ciphertext []byte, blockSize int) []byte

+ func SetHelloRandomFormat(format int)

+ func SetKeyPairLoader(loader KeyPairLoader)

+ func SetTlsMultiCertificate(m MultiCertificate)

+ func UpdateListener(ln net.Listener, conf *Config) error

+ func VersionText(ver uint16) string

+ func VersionTextForOpenSSL(ver uint16) string

+ type CRLPool struct

+ func NewCRLPool() *CRLPool

+ func (p *CRLPool) AddCRL(crl *pkix.CertificateList) error

+ func (p *CRLPool) CheckCertRevoked(cert *x509.Certificate) bool

+ type Certificate struct

+ Certificate [][]byte

+ Leaf *x509.Certificate

+ OCSPParse *ocsp.Response

+ OCSPStaple []byte

+ PrivateKey crypto.PrivateKey

+ func LoadX509KeyPair(certFile, keyFile string) (cert Certificate, err error)

+ func X509KeyPair(certPEMBlock, keyPEMBlock []byte) (cert Certificate, err error)

+ type CipherFilter func(id uint16) bool

+ type ClientAuthType int

+ const NoClientCert

+ const RequestClientCert

+ const RequireAndVerifyClientCert

+ const RequireAnyClientCert

+ const VerifyClientCertIfGiven

+ type ClientSessionCache interface

+ Get func(sessionKey string) (session *ClientSessionState, ok bool)

+ Put func(sessionKey string, cs *ClientSessionState)

+ func NewLRUClientSessionCache(capacity int) ClientSessionCache

+ type ClientSessionState struct

+ type Config struct

+ Certificates []Certificate

+ CipherSuites []uint16

+ CipherSuitesPriority []uint16

+ ClientAuth ClientAuthType

+ ClientCAs *x509.CertPool

+ ClientSessionCache ClientSessionCache

+ CurvePreferences []CurveID

+ EnableSslv2ClientHello bool

+ InsecureSkipVerify bool

+ MaxVersion uint16

+ MinVersion uint16

+ MultiCert MultiCertificate

+ NameToCertificate map[string]*Certificate

+ NextProtos []string

+ PreferServerCipherSuites bool

+ Rand io.Reader

+ RootCAs *x509.CertPool

+ ServerName string

+ ServerRule ServerRule

+ ServerSessionCache ServerSessionCache

+ SessionCacheDisabled bool

+ SessionTicketKey [32]byte

+ SessionTicketKeyName [16]byte

+ SessionTicketsDisabled bool

+ Ssl3PoodleProofed bool

+ Time func() time.Time

+ func (c *Config) BuildNameToCertificate()

+ func (c *Config) Clone() *Config

+ type Conn struct

+ func Client(conn net.Conn, config *Config) *Conn

+ func Dial(network, addr string, config *Config) (*Conn, error)

+ func DialWithDialer(dialer *net.Dialer, network, addr string, config *Config) (*Conn, error)

+ func Server(conn net.Conn, config *Config) *Conn

+ func (c *Conn) Close() error

+ func (c *Conn) ConnectionState() ConnectionState

+ func (c *Conn) GetNetConn() net.Conn

+ func (c *Conn) GetServerName() string

+ func (c *Conn) GetVip() net.IP

+ func (c *Conn) Handshake() error

+ func (c *Conn) LocalAddr() net.Addr

+ func (c *Conn) OCSPResponse() []byte

+ func (c *Conn) Read(b []byte) (n int, err error)

+ func (c *Conn) RemoteAddr() net.Addr

+ func (c *Conn) SetConnParam(param ConnParam)

+ func (c *Conn) SetDeadline(t time.Time) error

+ func (c *Conn) SetReadDeadline(t time.Time) error

+ func (c *Conn) SetWriteDeadline(t time.Time) error

+ func (c *Conn) VerifyHostname(host string) error

+ func (c *Conn) Write(b []byte) (int, error)

+ type ConnParam interface

+ GetVip func() net.IP

+ type ConnectionState struct

+ CipherSuite uint16

+ ClientAuth bool

+ ClientCAName string

+ ClientCiphers []uint16

+ ClientRandom []byte

+ DidResume bool

+ HandshakeComplete bool

+ HandshakeTime time.Duration

+ MasterSecret []byte

+ NegotiatedProtocol string

+ NegotiatedProtocolIsMutual bool

+ OcspStaple bool

+ PeerCertificates []*x509.Certificate

+ ServerName string

+ ServerRandom []byte

+ VerifiedChains [][]*x509.Certificate

+ Version uint16

+ type CurveID uint16

+ const CurveP256

+ const CurveP384

+ const CurveP521

+ type KeyPairLoader interface

+ LoadX509KeyPair func(certFile, keyFile string) (cert Certificate, err error)

+ type MultiCertificate interface

+ Get func(c *Conn) *Certificate

+ type NextProtoConf interface

+ Get func(c *Conn) []string

+ type Rule struct

+ Chacha20 bool

+ ClientAuth bool

+ ClientCAName string

+ ClientCAs *x509.CertPool

+ ClientCRLPool *CRLPool

+ DynamicRecord bool

+ Grade string

+ NextProtos NextProtoConf

+ type ServerRule interface

+ Get func(c *Conn) *Rule

+ type ServerSessionCache interface

+ Get func(sessionKey string) (sessionState []byte, ok bool)

+ Put func(sessionKey string, sessionState []byte) error

+ type TlsState struct

+ TlsHandshakeAcceptEcdheWithoutExt *metrics.Counter

+ TlsHandshakeAcceptSslv2ClientHello *metrics.Counter

+ TlsHandshakeCheckResumeSessionCache *metrics.Counter

+ TlsHandshakeCheckResumeSessionTicket *metrics.Counter

+ TlsHandshakeFullAll *metrics.Counter

+ TlsHandshakeFullSucc *metrics.Counter

+ TlsHandshakeNoSharedCipherSuite *metrics.Counter

+ TlsHandshakeOcspTimeErr *metrics.Counter

+ TlsHandshakeReadClientHelloErr *metrics.Counter

+ TlsHandshakeResumeAll *metrics.Counter

+ TlsHandshakeResumeSucc *metrics.Counter

+ TlsHandshakeShouldResumeSessionCache *metrics.Counter

+ TlsHandshakeShouldResumeSessionTicket *metrics.Counter

+ TlsHandshakeSslv2NotSupport *metrics.Counter

+ TlsHandshakeZeroData *metrics.Counter

+ TlsStatusRequestExtCount *metrics.Counter

+ func GetTlsState() *TlsState