canDelegate returns true if a certificate can be used for delegated credentials.

checkForResumption reports whether we should perform resumption on this connection.

checkPSK tries to resume using a PSK, returning true (and updating the early secret in the key schedule) if the PSK was used and false otherwise.

clientSessionCacheKey returns a key used to cache sessionTickets that could be used to resume previously negotiated TLS sessions with a server.

connFromCommand starts the reference server process, connects to it and returns a recordingConn for the connection. The stdin return value is an opens

connFromCommand starts opens a listening socket and starts the reference client to connect to it. It returns a recordingConn that wraps the resulting

Parses the input PEM block containing the test DCs.

decrypt checks and strips the mac and decrypts the data in b. Returns a success boolean, the number of bytes to skip from the start of the record in o

encrypt encrypts and macs the data in b.

extractPaddingSSL30 is a replacement for extractPadding in the case that the protocol version is SSLv3. In this version, the contents of the padding a

On the server side, the first two methods are called in order. In the case that the key agreement protocol doesn't use a ServerKeyExchange message, ge

getCredentialLen returns the number of bytes comprising the serialized credential that starts at the beginning of the input slice. It returns an error

getHash maps the SignatureScheme to its corresponding hash function. TODO(any) This function overlaps with hashForSignatureScheme in 13.go.

TODO(kk): Use variable length encoding?

Process Handshake messages after the handshake has completed. c.in.Mutex <= L

handleRenegotiation processes a HelloRequest handshake message. c.in.Mutex <= L

Does the handshake, either a full one or resumes old session. Requires hs.c, hs.hello, and, optionally, hs.session to be set.

hashForSignatureScheme returns the Hash used by a SignatureScheme which is supported by selectTLS13SignatureScheme.

hostnameInSNI converts name into an appropriate hostname for SNI. Literal IP addresses and absolute FQDNs are not permitted as SNI values. See https:/

invalidTTL returns true if the credential's validity period is longer than the maximum permitted. This is defined by the certificate's notBefore field

isExpired returns true if the credential has expired. The end of the validity interval is defined as the delegator certificate's notBefore field (`sta

lookupTLSHash looks up the corresponding crypto.Hash for a given hash from a TLS SignatureScheme.

marshalSubjectPublicKeyInfo returns a DER encoded SubjectPublicKeyInfo structure (as defined in the X.509 standard) for the credential.

maxPayloadSizeForWrite returns the maximum TLS payload size to use for the next application data record. There is the following trade-off: - For late

md5SHA1Hash implements TLS 1.0's hybrid hash function which consists of the concatenation of an MD5 and SHA1 hash.

mutualCipherSuite returns a cipherSuite given a list of supported ciphersuites and the id requested by the peer.

mutualVersion returns the protocol version to use given the advertised version of the peer using the legacy non-extension methods.

padToBlockSize calculates the needed padding block, if any, for a payload. On exit, prefix aliases payload and extends to the end of the last full blo

Attempt to parse the given private key DER block. OpenSSL 0.9.8 generates PKCS#1 private keys by default, while OpenSSL 1.0.0 generates PKCS#8 keys. O

peekAlert looks at a message to spot an unencrypted alert. It must be called before decryption to avoid a side channel, and its result must only be us

prepareDelegation returns a hash of the message that the delegator is to sign. The inputs are the credential (`cred`), the DER-encoded delegator certi

processDelegatedCredentialFromServer unmarshals the delegated credential offered by the server (if present) and validates it using the peer certificat

On the client side, the next two methods are called in order. This method may not be called if the server doesn't send a ServerKeyExchange message.

selectTLS13SignatureScheme chooses the SignatureScheme for the CertificateVerify based on the certificate type and client supported schemes. If no ove

serverHandshake performs a TLS handshake as a server. c.out.Mutex <= L; c.handshakeMutex <= L.

setServerCertificateFromArgs sets server certificate from an argument provided by the caller. Possible values for arg_cert: * "rsa": sets hardcoded RS

splitBlock splits a block after the first n bytes, returning a block with those n bytes and a block with the remainder. the latter may be nil.

Executes the handshake with the given configuration and returns true if the delegated credential extension was successfully negotiated.

unmarshalCredential decodes a credential and returns it.