sendAlert sends a TLS alert message.

Clone returns a shallow clone of c or nil if c is nil. It is safe to clone a [Config] that is being used concurrently by a TLS client or server.

Intn is equivalent to math/read.Intn, except it returns 0 if n <= 0 instead of panicking.

Close closes the connection.

Handshake runs the client or server handshake protocol if it has not yet been run. Most uses of this package need not call Handshake explicitly: the

Bytes encodes the session, including any private fields, so that it can be parsed by [ParseSessionState]. The encoding contains secret values critical

Server returns a new TLS server side connection using conn as the underlying transport. The configuration config must be non-nil and must include at l

writeHandshakeRecord writes a handshake message to the connection and updates the record layer state. If transcript is non-nil the marshaled message i

ConnectionState returns basic TLS details about the connection.

includes header Read reads up to len(p) bytes into p. It returns the number of bytes read (0 <= n <= len(p)) and any error encountered.

SetTransportParameters sets the transport parameters to send to the peer. Server connections may delay setting the transport parameters until after r

Client returns a new TLS client side connection using conn as the underlying transport. The config cannot be nil: users must set either ServerName or

readHandshake reads the next handshake message from the record layer. If transcript is non-nil, the message is written to the passed transcriptHash.

transcriptMsg is a helper used to hash messages which are not hashed when they are read from, or written to, the wire. This is typically the case for

* * HELPER FUNCTIONS BELOW * */

FlipWeightedCoin returns the result of a weighted random coin flip. If the weight is 0.5, the outcome is equally likely to be true or false. If the we

quicError ensures err is an AlertError. If err is not already, quicError wraps it with alertInternalError.

readUint8LengthPrefixed acts like s.ReadUint8LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

Put adds the ClientSessionState to the cache with the given key. It might get called multiple times in a connection if a TLS 1.3 server provides more

readUint16LengthPrefixed acts like s.ReadUint16LengthPrefixed, but targets a []byte instead of a cryptobyte.String.

Append appends i in the QUIC varint format.

NewLRUClientSessionCache returns a [ClientSessionCache] with the given capacity that uses an LRU strategy. If capacity is < 1, a default capacity is u

UClient returns a new uTLS client, with behavior depending on clientHelloID. Config CAN be nil, but make sure to eventually specify ServerName.

var x509keypairleaf = godebug.New("x509keypairleaf") [uTLS] X509KeyPair parses a public/private key pair from a pair of PEM encoded data. On successfu

var tlsunsafeekm = godebug.New("tlsunsafeekm") // [uTLS] unsupportted

Accept waits for and returns the next incoming TLS connection. The returned connection is of type *Conn.

BuildHandshakeState behavior varies based on ClientHelloID and whether it was already called before. If HelloGolang: [only once] make default Client

We don't set the service indicator in this package but we delegate that to the underlying functions because the TLS 1.3 KDF does not have a standard o

Get searches for a ClientSessionState associated with the given key. On return, ok is true if one was found.

supportedSignatureAlgorithms returns the supported signature algorithms.

FingerprintClientHello returns a ClientHelloSpec which is based on the ClientHello that is passed in as the data argument If the ClientHello passed i

tempFile creates a temp file containing contents and returns its path.

typeAndHashFromSignatureScheme returns the corresponding signature type and crypto.Hash for a given TLS SignatureScheme.

ApplyPreset should only be used in conjunction with HelloCustom to apply custom specs. Fields of TLSExtensions that are slices/pointers are shared acr

Dial connects to the given network address using net.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Dial interprets

ShuffleChromeTLSExtensions shuffles the extensions in the ClientHelloSpec to avoid ossification. It shuffles every extension except GREASE, padding an

BuildNameToCertificate parses c.Certificates and builds c.NameToCertificate from the CommonName and SubjectAlternateName fields of each of the leaf ce

will panic if ssl_grease_last_index[index] is out of bounds.

HandshakeContext runs the client or server handshake protocol if it has not yet been run. The provided Context must be non-nil. If the context is can

generateECDHEKey returns a PrivateKey that implements Diffie-Hellman according to RFC 8446, Section 4.2.8.2.

prepareCipherSpec sets the encryption and MAC states that a subsequent changeCipherSpec will use.

prependRecordHeader prepends a record header to a handshake messsage if attempting to mimic an existing connection the minTLSVersion can be found in t

selectSignatureScheme picks a SignatureScheme from the peer's preference list that works with the selected certificate. It's only called for protocol

writeRecordLocked writes a TLS record with the given type and payload to the connection and updates the record layer state.

Dial connects to the given network address and initiates a TLS handshake, returning the resulting TLS connection. The returned [Conn], if any, will a

clientSessionCacheKey returns a key used to cache sessionTickets that could be used to resume previously negotiated TLS sessions with a server.

legacyTypeAndHashFromPublicKey returns the fixed signature type and crypto.Hash for a given public key used with TLS 1.0 and 1.1, before the introduct