aghtls

Documentation

Overview

Package aghtls contains utilities for work with TLS.

Index

• func CertificateHasIP(cert *x509.Certificate) (ok bool)
• func ParseCiphers(cipherNames []string) (cipherIDs []uint16, err error)
• func SaferCipherSuites() (safe []uint16)
• func SystemRootCAs() (roots *x509.CertPool)

Functions

func CertificateHasIP

func CertificateHasIP(cert *x509.Certificate) (ok bool)

CertificateHasIP returns true if cert has at least a single IP address among its subjectAltNames.

func ParseCiphers

func ParseCiphers(cipherNames []string) (cipherIDs []uint16, err error)

ParseCiphers parses a slice of cipher suites from cipher names.

func SaferCipherSuites

func SaferCipherSuites() (safe []uint16)

SaferCipherSuites returns a set of default cipher suites with vulnerable and weak cipher suites removed.

func SystemRootCAs

func SystemRootCAs() (roots *x509.CertPool)

SystemRootCAs tries to load root certificates from the operating system. It returns nil in case nothing is found so that Go' crypto/x509 can use its default algorithm to find system root CA list.

See https://github.com/AdguardTeam/AdGuardHome/issues/1311.