Get returns the ClientSessionState value associated with a given key. It returns (nil, false) if no value is found.

Listen creates a TLS listener accepting connections on the given network address using net.Listen. The configuration config must be non-nil and must i

LoadX509KeyPair reads and parses a public/private key pair from a pair of files. The files must contain PEM encoded data. The certificate file may con

Access to net.Conn methods. Cannot just embed net.Conn because that would export the struct field too. LocalAddr returns the local network address.

MAC does not offer constant timing guarantees for SSL v3.0, since it's deemed useless considering the similar, protocol-level POODLE vulnerability.

MAC is guaranteed to take constant time, as long as len(seq)+len(header)+len(data)+len(extra) is constant. extra is not fed into the MAC, but is only

OCSPResponse returns the stapled OCSP response from the TLS server, if any. (Only valid for client connections.)

Overhead returns the maximum difference between the lengths of a plaintext and its ciphertext.

Put adds the provided (sessionKey, cs) pair to the cache.

c.in.Mutex <= L

SetDeadline sets the read and write deadlines associated with the connection. A zero value for t means Read and Write will not time out. After a Write

SetReadDeadline sets the read deadline on the underlying connection. A zero value for t means Read will not time out.

SetWriteDeadline sets the write deadline on the underlying connection. A zero value for t means Write will not time out. After a Write has timed out,

TestCipherSuiteCertPreference ensures that we select an RSA ciphersuite with an RSA certificate and an ECDSA ciphersuite with an ECDSA certificate.

This test is specific to TLS versions which support session tickets (TLSv1.2 and below). Session tickets are obsolete in TLSv1.3 (see 2.2 of TLS RFC)

tests that Conn.Read returns (non-zero, io.EOF) instead of (non-zero, nil) when a Close (alertCloseNotify) is sitting right behind the application dat

Tests the handshake with the delegated credential extension for each test case in dcTests.

TestHandshakeServerEmptyCertificates tests that GetCertificates is called in the case that Certificates is empty, even without SNI.

TestHandshakeServerSNI involves a client sending an SNI extension of "snitest.com", which happens to match the CN of testSNICertificate. The test veri

TestHandshakeServerSNICertForName is similar to TestHandshakeServerSNI, but tests the dynamic GetCertificate method

TestHandshakeServerSNICertForNameError tests to make sure that errors in GetCertificate result in a tls alert.

TestHandshakeServerSNICertForNameNotFound is similar to TestHandshakeServerSNICertForName, but tests to make sure that when the GetCertificate method