sendAlert sends a TLS alert message. L < c.out.Mutex.

Clone returns a shallow clone of c. It is safe to clone a Config that is being used concurrently by a TLS client or server.

Write writes data to the connection.

Close closes the connection.

Handshake runs the client or server handshake protocol if it has not yet been run. Most uses of this package need not call Handshake explicitly: the f

writeRecord writes a TLS record with the given type and payload to the connection and updates the record layer state. L < c.out.Mutex.

Server returns a new TLS server side connection using conn as the underlying transport. The configuration config must be non-nil and must include at l

readHandshake reads the next handshake message from the record layer. c.in.Mutex < L; c.out.Mutex < L.

Client returns a new TLS client side connection using conn as the underlying transport. The config cannot be nil: users must set either ServerName or

write appends the data to the transcript hash context.

ConnectionState returns basic TLS details about the connection.

X509KeyPair parses a public/private key pair from a pair of PEM encoded data. On successful return, Certificate.Leaf will be nil because the parsed fo

Dial connects to the given network address using net.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Dial interprets

Get searches for a ClientSessionState associated with the given key. On return, ok is true if one was found.

Accept waits for and returns the next incoming TLS connection. The returned connection is of type *Conn.

freeBlock returns a block to hc's free list. The protocol is such that each side only has a block or two on its free list at a time, so there's no nee

resize resizes block to be n bytes, growing if necessary.

tempFile creates a temp file containing contents and returns its path.

pickSignatureAlgorithm selects a signature algorithm that is compatible with the given public key and the list of algorithms from both sides of connec

readRecord reads the next TLS record from the connection and updates the record layer state. c.in.Mutex <= L; c.input == nil. c.input can still be nil

BuildNameToCertificate parses c.Certificates and builds c.NameToCertificate from the CommonName and SubjectAlternateName fields of each of the leaf ce

setSecret sets the early/handshake/master secret based on the given secret (IKM). The salt is based on previous secrets (nil for the early secret).

NewLRUClientSessionCache returns a ClientSessionCache with the given capacity that uses an LRU strategy. If capacity is < 1, a default capacity is use

Put adds the ClientSessionState to the cache with the given key.

Read can be made to time out and return a net.Error with Timeout() == true after a fixed time limit; see SetDeadline and SetReadDeadline.

VerifyHostname checks that the peer certificate chain is valid for connecting to host. If so, it returns nil; if not, it returns an error describing t

discardHandshakeBuffer is called when there is no more need to buffer the entirety of the handshake messages.

Seal returns a session ticket value that can be later passed to Unseal to recover the content, usually by encrypting it. The ticket will be sent to th

SetSessionTicketKeys updates the session ticket keys for a server. The first key will be used when creating new tickets, while all keys can be used fo

WriteTo writes Go source code to w that contains the recorded traffic.

Function used for signature_algorithms and signature_algorithrms_cert extensions only (for more details, see TLS 1.3 draft 28, 4.2.3). It advances da

prepareCipherSpec sets the encryption and MAC states that a subsequent changeCipherSpec will use.

sendAlert sends a TLS alert message. c.out.Mutex <= L.

validate checks that that the signature is valid, that the credential hasn't expired, and that the TTL is valid. It also checks that certificate can b

writeRecordLocked writes a TLS record with the given type and payload to the connection and updates the record layer state. c.out.Mutex <= L.

CloseWrite shuts down the writing side of the connection. It should only be called once the handshake has completed and does not call CloseWrite on th

c - context of current TLS handshake, ks - public key received from the other side of the connection, secretKey - is a private key used for DH key agr

deriveSecret returns the secret derived from the handshake context and label.

finishedSum30 calculates the contents of the verify_data member of a SSLv3 Finished message given the MD5 and SHA1 hashes of a set of handshake messag

c - context of current TLS handshake, groupId - ID of an algorithm (curve/field) being chosen for key agreement. Methods implmenting an interface alwa

keysFromMasterSecret generates the connection keys from the master secret, given the lengths of the MAC key, cipher key and IV, as defined in RFC 2246