tls

package

Go to main page

Versions in this module

v1

v1.23.0

Aug 14, 2024

Changes in this version

type ClientHelloInfo

+ Extensions []uint16

type Config

+ EncryptedClientHelloConfigList []byte

+ EncryptedClientHelloRejectionVerify func(ConnectionState) error

type ConnectionState

+ ECHAccepted bool

+ type ECHRejectionError struct

+ RetryConfigList []byte

+ func (e *ECHRejectionError) Error() string

type QUICConfig

+ EnableSessionEvents bool

type QUICConn

+ func (q *QUICConn) StoreSession(session *SessionState) error

type QUICEvent

+ SessionState *SessionState

type QUICEventKind

+ const QUICResumeSession

+ const QUICStoreSession

type QUICSessionTicketOptions

+ Extra [][]byte

v1.22.0

Feb 26, 2024

v1.21.10

Feb 7, 2024

v1.21.9

Dec 31, 2023

v1.21.8

Dec 24, 2023

v1.21.7

Dec 24, 2023

v1.21.6

Dec 9, 2023

v1.21.5

Nov 6, 2023

v1.21.4

Nov 2, 2023

v1.21.3

Oct 14, 2023

v1.21.2

Oct 10, 2023

v1.21.1

Oct 1, 2023

v1.21.0

Sep 26, 2023

Changes in this version

+ const QUICEncryptionLevelApplication

+ const QUICEncryptionLevelEarly

+ const QUICEncryptionLevelHandshake

+ const QUICEncryptionLevelInitial

+ func VersionName(version uint16) string

+ type AlertError uint8

+ func (e AlertError) Error() string

type ClientSessionState

+ func NewResumptionState(ticket []byte, state *SessionState) (*ClientSessionState, error)

+ func (cs *ClientSessionState) ResumptionState() (ticket []byte, state *SessionState, err error)

type Config

+ UnwrapSession func(identity []byte, cs ConnectionState) (*SessionState, error)

+ WrapSession func(ConnectionState, *SessionState) ([]byte, error)

+ func (c *Config) DecryptTicket(identity []byte, cs ConnectionState) (*SessionState, error)

+ func (c *Config) EncryptTicket(cs ConnectionState, ss *SessionState) ([]byte, error)

+ type QUICConfig struct

+ TLSConfig *Config

+ type QUICConn struct

+ func QUICClient(config *QUICConfig) *QUICConn

+ func QUICServer(config *QUICConfig) *QUICConn

+ func (q *QUICConn) Close() error

+ func (q *QUICConn) ConnectionState() ConnectionState

+ func (q *QUICConn) HandleData(level QUICEncryptionLevel, data []byte) error

+ func (q *QUICConn) NextEvent() QUICEvent

+ func (q *QUICConn) SendSessionTicket(opts QUICSessionTicketOptions) error

+ func (q *QUICConn) SetTransportParameters(params []byte)

+ func (q *QUICConn) Start(ctx context.Context) error

+ type QUICEncryptionLevel int

+ func (l QUICEncryptionLevel) String() string

+ type QUICEvent struct

+ Data []byte

+ Kind QUICEventKind

+ Level QUICEncryptionLevel

+ Suite uint16

+ type QUICEventKind int

+ const QUICHandshakeDone

+ const QUICNoEvent

+ const QUICRejectedEarlyData

+ const QUICSetReadSecret

+ const QUICSetWriteSecret

+ const QUICTransportParameters

+ const QUICTransportParametersRequired

+ const QUICWriteData

+ type QUICSessionTicketOptions struct

+ EarlyData bool

+ type SessionState struct

+ EarlyData bool

+ Extra [][]byte

+ func ParseSessionState(data []byte) (*SessionState, error)

+ func (s *SessionState) Bytes() ([]byte, error)

v1.20.0

Sep 26, 2023

Changes in this version

+ type CertificateVerificationError struct

+ Err error

+ UnverifiedCertificates []*x509.Certificate

+ func (e *CertificateVerificationError) Error() string

+ func (e *CertificateVerificationError) Unwrap() error

v1.19.0

Sep 26, 2023

v1.18.0

Sep 26, 2023

Changes in this version

type Conn

+ func (c *Conn) NetConn() net.Conn

v1.17.0

Sep 26, 2023

Changes in this version

type CertificateRequestInfo

+ func (c *CertificateRequestInfo) Context() context.Context

type ClientHelloInfo

+ func (c *ClientHelloInfo) Context() context.Context

type Conn

+ func (c *Conn) HandshakeContext(ctx context.Context) error

v1.16.0

Sep 26, 2023

v1.15.0

Sep 26, 2023

Changes in this version

type ClientAuthType

+ func (i ClientAuthType) String() string

type Config

+ VerifyConnection func(ConnectionState) error

type CurveID

+ func (i CurveID) String() string

+ type Dialer struct

+ Config *Config

+ NetDialer *net.Dialer

+ func (d *Dialer) Dial(network, addr string) (net.Conn, error)

+ func (d *Dialer) DialContext(ctx context.Context, network, addr string) (net.Conn, error)

type SignatureScheme

+ func (i SignatureScheme) String() string

v1.14.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

+ func CipherSuiteName(id uint16) string

type Certificate

+ SupportedSignatureAlgorithms []SignatureScheme

type CertificateRequestInfo

+ Version uint16

+ func (cri *CertificateRequestInfo) SupportsCertificate(c *Certificate) error

+ type CipherSuite struct

+ ID uint16

+ Insecure bool

+ Name string

+ SupportedVersions []uint16

+ func CipherSuites() []*CipherSuite

+ func InsecureCipherSuites() []*CipherSuite

type ClientHelloInfo

+ func (chi *ClientHelloInfo) SupportsCertificate(c *Certificate) error

v1.13.0

Sep 26, 2023

Changes in this version

type SignatureScheme

+ const Ed25519

v1.12.0

Sep 26, 2023

Changes in this version

+ const TLS_AES_128_GCM_SHA256

+ const TLS_AES_256_GCM_SHA384

+ const TLS_CHACHA20_POLY1305_SHA256

+ const VersionTLS13

type RecordHeaderError

+ Conn net.Conn

v1.11.0

Sep 26, 2023

Changes in this version

type ConnectionState

+ func (cs *ConnectionState) ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error)

v1.10.0

Sep 26, 2023

Changes in this version

type SignatureScheme

+ const ECDSAWithSHA1

v1.9.0

Sep 26, 2023

v1.8.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

+ const TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305

+ const TLS_RSA_WITH_AES_128_CBC_SHA256

+ type CertificateRequestInfo struct

+ AcceptableCAs [][]byte

+ SignatureSchemes []SignatureScheme

type ClientHelloInfo

+ Conn net.Conn

+ SignatureSchemes []SignatureScheme

+ SupportedProtos []string

+ SupportedVersions []uint16

type Config

+ GetClientCertificate func(*CertificateRequestInfo) (*Certificate, error)

+ GetConfigForClient func(*ClientHelloInfo) (*Config, error)

+ KeyLogWriter io.Writer

+ VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error

+ func (c *Config) Clone() *Config

type Conn

+ func (c *Conn) CloseWrite() error

type CurveID

+ const X25519

+ type SignatureScheme uint16

+ const ECDSAWithP256AndSHA256

+ const ECDSAWithP384AndSHA384

+ const ECDSAWithP521AndSHA512

+ const PKCS1WithSHA1

+ const PKCS1WithSHA256

+ const PKCS1WithSHA384

+ const PKCS1WithSHA512

+ const PSSWithSHA256

+ const PSSWithSHA384

+ const PSSWithSHA512

v1.7.0

Sep 26, 2023

Changes in this version

type Config

+ DynamicRecordSizingDisabled bool

+ Renegotiation RenegotiationSupport

+ type RenegotiationSupport int

+ const RenegotiateFreelyAsClient

+ const RenegotiateNever

+ const RenegotiateOnceAsClient

v1.6.0

Sep 26, 2023

Changes in this version

+ const TLS_RSA_WITH_AES_128_GCM_SHA256

+ const TLS_RSA_WITH_AES_256_GCM_SHA384

+ type RecordHeaderError struct

+ Msg string

+ RecordHeader [5]byte

+ func (e RecordHeaderError) Error() string

v1.5.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

+ const TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

type Certificate

+ SignedCertificateTimestamps [][]byte

type Config

+ func (c *Config) SetSessionTicketKeys(keys [][32]byte)

type ConnectionState

+ OCSPResponse []byte

+ SignedCertificateTimestamps [][]byte

v1.4.0

Sep 26, 2023

Changes in this version

+ const TLS_FALLBACK_SCSV

+ type ClientHelloInfo struct

+ CipherSuites []uint16

+ ServerName string

+ SupportedCurves []CurveID

+ SupportedPoints []uint8

type Config

+ GetCertificate func(clientHello *ClientHelloInfo) (*Certificate, error)

type ConnectionState

+ TLSUnique []byte

v1.3.0

Sep 26, 2023

Changes in this version

+ type ClientSessionCache interface

+ Get func(sessionKey string) (session *ClientSessionState, ok bool)

+ Put func(sessionKey string, cs *ClientSessionState)

+ func NewLRUClientSessionCache(capacity int) ClientSessionCache

+ type ClientSessionState struct

type Config

+ ClientSessionCache ClientSessionCache

+ CurvePreferences []CurveID

type Conn

+ func DialWithDialer(dialer *net.Dialer, network, addr string, config *Config) (*Conn, error)

type ConnectionState

+ Version uint16

+ type CurveID uint16

+ const CurveP256

+ const CurveP384

+ const CurveP521

v1.2.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

+ const TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

+ const TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

+ const VersionSSL30

+ const VersionTLS10

+ const VersionTLS11

+ const VersionTLS12

type Config

+ MaxVersion uint16

+ MinVersion uint16

v1.1.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

+ const TLS_RSA_WITH_AES_256_CBC_SHA

type Config

+ PreferServerCipherSuites bool

+ SessionTicketKey [32]byte

+ SessionTicketsDisabled bool

type ConnectionState

+ DidResume bool

v1.0.2

Sep 26, 2023

v1.0.1

Sep 26, 2023

v1.0.0

Sep 26, 2023

Changes in this version

+ const TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

+ const TLS_ECDHE_RSA_WITH_RC4_128_SHA

+ const TLS_RSA_WITH_3DES_EDE_CBC_SHA

+ const TLS_RSA_WITH_AES_128_CBC_SHA

+ const TLS_RSA_WITH_RC4_128_SHA

+ func Listen(network, laddr string, config *Config) (net.Listener, error)

+ func NewListener(inner net.Listener, config *Config) net.Listener

+ type Certificate struct

+ Certificate [][]byte

+ Leaf *x509.Certificate

+ OCSPStaple []byte

+ PrivateKey crypto.PrivateKey

+ func LoadX509KeyPair(certFile, keyFile string) (cert Certificate, err error)

+ func X509KeyPair(certPEMBlock, keyPEMBlock []byte) (cert Certificate, err error)

+ type ClientAuthType int

+ const NoClientCert

+ const RequestClientCert

+ const RequireAndVerifyClientCert

+ const RequireAnyClientCert

+ const VerifyClientCertIfGiven

+ type Config struct

+ Certificates []Certificate

+ CipherSuites []uint16

+ ClientAuth ClientAuthType

+ ClientCAs *x509.CertPool

+ InsecureSkipVerify bool

+ NameToCertificate map[string]*Certificate

+ NextProtos []string

+ Rand io.Reader

+ RootCAs *x509.CertPool

+ ServerName string

+ Time func() time.Time

+ func (c *Config) BuildNameToCertificate()

+ type Conn struct

+ func Client(conn net.Conn, config *Config) *Conn

+ func Dial(network, addr string, config *Config) (*Conn, error)

+ func Server(conn net.Conn, config *Config) *Conn

+ func (c *Conn) Close() error

+ func (c *Conn) ConnectionState() ConnectionState

+ func (c *Conn) Handshake() error

+ func (c *Conn) LocalAddr() net.Addr

+ func (c *Conn) OCSPResponse() []byte

+ func (c *Conn) Read(b []byte) (n int, err error)

+ func (c *Conn) RemoteAddr() net.Addr

+ func (c *Conn) SetDeadline(t time.Time) error

+ func (c *Conn) SetReadDeadline(t time.Time) error

+ func (c *Conn) SetWriteDeadline(t time.Time) error

+ func (c *Conn) VerifyHostname(host string) error

+ func (c *Conn) Write(b []byte) (int, error)

+ type ConnectionState struct

+ CipherSuite uint16

+ HandshakeComplete bool

+ NegotiatedProtocol string

+ NegotiatedProtocolIsMutual bool

+ PeerCertificates []*x509.Certificate

+ ServerName string

+ VerifiedChains [][]*x509.Certificate

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL