sendAlert sends a TLS alert message.

Bytes encodes the session, including any private fields, so that it can be parsed by [ParseSessionState]. The encoding contains secret values critical

Clone returns a shallow clone of c or nil if c is nil. It is safe to clone a [Config] that is being used concurrently by a TLS client or server.

writeHandshakeRecord writes a handshake message to the connection and updates the record layer state. If transcript is non-nil the marshaled message i

readHandshake reads the next handshake message from the record layer. If transcript is non-nil, the message is written to the passed transcriptHash.

transcriptMsg is a helper used to hash messages which are not hashed when they are read from, or written to, the wire. This is typically the case for

readUint16LengthPrefixed acts like s.ReadUint16LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

readUint8LengthPrefixed acts like s.ReadUint8LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

We don't set the service indicator in this package but we delegate that to the underlying functions because the TLS 1.3 KDF does not have a standard o

Required reports whether FIPS-approved settings are required. Required is true if FIPS 140-3 mode is enabled with GODEBUG=fips140=on, or if the crypt

typeAndHashFromSignatureScheme returns the corresponding signature type and crypto.Hash for a given TLS SignatureScheme.

quicError ensures err is an AlertError. If err is not already, quicError wraps it with alertInternalError.

Put adds the ClientSessionState to the cache with the given key. It might get called multiple times in a connection if a TLS 1.3 server provides more

generateECDHEKey returns a PrivateKey that implements Diffie-Hellman according to RFC 8446, Section 4.2.8.2.

writeRecordLocked writes a TLS record with the given type and payload to the connection and updates the record layer state.

RemoteAddr returns the remote network address.

readUint24LengthPrefixed acts like s.ReadUint24LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

selectSignatureScheme picks a SignatureScheme from the peer's preference list that works with the selected certificate. It's only called for protocol

sendAlertLocked sends a TLS alert message.

supportedSignatureAlgorithms returns the supported signature algorithms for the given minimum TLS version, to advertise in ClientHello and Certificate

64-bit sequence number

clientSessionCacheKey returns a key used to cache sessionTickets that could be used to resume previously negotiated TLS sessions with a server.

cloneHash uses the encoding.BinaryMarshaler and encoding.BinaryUnmarshaler interfaces implemented by standard library hashes to clone the state of in

discardHandshakeBuffer is called when there is no more need to buffer the entirety of the handshake messages.

finishedHash generates the Finished verify_data or PskBinderEntry according to RFC 8446, Section 4.4.4. See sections 4.4 and 4.2.11.2 for the baseKey

Handshake runs the client or server handshake protocol if it has not yet been run. Most uses of this package need not call Handshake explicitly: the

legacyTypeAndHashFromPublicKey returns the fixed signature type and crypto.Hash for a given public key used with TLS 1.0 and 1.1, before the introduct

prepareCipherSpec sets the encryption and MAC states that a subsequent changeCipherSpec will use.

retryReadRecord recurs into readRecordOrCCS to drop a non-advancing record, like a warning alert, empty application_data, or a change_cipher_spec in T

selectCipherSuite returns the first TLS 1.0–1.2 cipher suite from ids which is also in supportedIDs and passes the ok filter.

sessionState returns a partially filled-out [SessionState] with information from the current connection.

signedMessage returns the pre-hashed (if necessary) message to be signed by certificate keys in TLS 1.3. See RFC 8446, Section 4.4.3.

sliceForAppend extends the input slice by n bytes. head is the full extended slice, while tail is the appended part. If the original slice has suffici

unsupportedCertificateError returns a helpful error for certificates with an unsupported private key.

verifyHandshakeSignature verifies a signature against pre-hashed (if required) handshake contents.

writeChangeCipherRecord writes a ChangeCipherSpec message to the connection and updates the record layer state.

Close closes the connection.

DialContext connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The provided Context must be

HandshakeContext runs the client or server handshake protocol if it has not yet been run. The provided Context must be non-nil. If the context is can

Access to net.Conn methods. Cannot just embed net.Conn because that would export the struct field too. LocalAddr returns the local network address.

ParseSessionState parses a [SessionState] encoded by [SessionState.Bytes].

fipsAllowedChains returns chains that are allowed to be used in a TLS connection based on the current fips140tls enforcement setting. If fips140tls i

incSeq increments the sequence number.

mutualVersion returns the protocol version to use given the advertised versions of the peer. The highest supported version is preferred.

quicWaitForSignal notifies the QUICConn that handshake progress is blocked, and waits for a signal that the handshake should proceed. The handshake m

readRecordOrCCS reads one or more TLS records from the connection and updates the record layer state. Some invariants: - c.in must be locked - c.input

requiresClientCert reports whether the ClientAuthType requires a client certificate to be provided.

supportedCipherSuites returns the supported TLS 1.0–1.2 cipher suites in an undefined order. For preference ordering, use [Config.cipherSuites].

supportedVersions returns the list of supported TLS versions, sorted from highest to lowest (and hence also in preference order).

supportedVersionsFromMax returns a list of supported versions derived from a legacy maximum version value. Note that only versions supported by this l

ticketKeyFromBytes converts from the external representation of a session ticket key to a ticketKey. Externally, session ticket keys are 32 random byt

ticketKeys returns the ticketKeys for this connection. If configForClient has explicitly set keys, those will be returned. Otherwise, the keys on c wi