processHelloRetryRequest handles the HRR in hs.serverHello, modifies and resends hs.hello, and reads the new ServerHello into hs.serverHello.

On the client side, the next two methods are called in order. This method may not be called if the server doesn't send a ServerKeyExchange message.

readClientHello reads a ClientHello message and selects the protocol version.

signatureSchemesForCertificate returns the list of supported SignatureSchemes for a given certificate, based on the public key and the protocol versio

Split a premaster secret in two as specified in RFC 4346, Section 5.

ticketKeys returns the ticketKeys for this connection. If configForClient has explicitly set keys, those will be returned. Otherwise, the keys on c wi

trafficKey generates traffic keys according to RFC 8446, Section 7.3.

Accept waits for and returns the next incoming TLS connection. The returned connection is of type *Conn.

BuildNameToCertificate parses c.Certificates and builds c.NameToCertificate from the CommonName and SubjectAlternateName fields of each of the leaf ce

CipherSuiteName returns the standard name for the passed cipher suite ID (e.g. "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"), or a fallback representatio

CloseWrite shuts down the writing side of the connection. It should only be called once the handshake has completed and does not call CloseWrite on th

ConnectionState returns basic TLS details about the connection.

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

Context returns the context of the handshake that is in progress. This context is a child of the context passed to HandshakeContext, if any, and is ca

Dial connects to the given network address using net.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Dial interprets

Dial connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The returned Conn, if any, will alw

ExportKeyingMaterial returns length bytes of exported key material in a new slice as defined in RFC 5705. If context is nil, it is not used as part of

Get returns the ClientSessionState value associated with a given key. It returns (nil, false) if no value is found.

Listen creates a TLS listener accepting connections on the given network address using net.Listen. The configuration config must be non-nil and must i

LoadX509KeyPair reads and parses a public/private key pair from a pair of files. The files must contain PEM encoded data. The certificate file may con

Access to net.Conn methods. Cannot just embed net.Conn because that would export the struct field too. LocalAddr returns the local network address.

NetConn returns the underlying connection that is wrapped by c. Note that writing to or reading from this connection directly will corrupt the TLS ses

NewLRUClientSessionCache returns a ClientSessionCache with the given capacity that uses an LRU strategy. If capacity is < 1, a default capacity is use

OCSPResponse returns the stapled OCSP response from the TLS server, if any. (Only valid for client connections.)

Put adds the provided (sessionKey, cs) pair to the cache. If cs is nil, the entry corresponding to sessionKey is removed from the cache instead.

SetDeadline sets the read and write deadlines associated with the connection. A zero value for t means Read and Write will not time out. After a Write

SetReadDeadline sets the read deadline on the underlying connection. A zero value for t means Read will not time out.

SetSessionTicketKeys updates the session ticket keys for a server. The first key will be used when creating new tickets, while all keys can be used f

SupportsCertificate returns nil if the provided certificate is supported by the server that sent the CertificateRequest. Otherwise, it returns an erro

handshake requires hs.c, hs.hello, hs.serverHello, hs.ecdheParams, and, optionally, hs.session, hs.earlySecret and hs.binderKey to be set.

macSHA1 returns a SHA-1 based constant time MAC.

macSHA256 returns a SHA-256 based MAC. This is only supported in TLS 1.2 and is currently only used in disabled-by-default cipher suites.