HasGoBuild reports whether the current system can build programs with ``go build'' and then run them with os.StartProcess or exec.Command.

InsecureCipherSuites returns a list of cipher suites currently implemented by this package and which have security issues. Most applications should n

IsInitialized returns a boolean indicating whether the extension has been initialized. If false is returned, utls will initialize the extension.

Access to net.Conn methods. Cannot just embed net.Conn because that would export the struct field too. LocalAddr returns the local network address.

MasterSecret generated by client on a full handshake

NextEvent returns the next event occurring on the connection. It returns an event with a Kind of [QUICNoEvent] when no events are available.

Read reads data from the connection. As Read calls [Conn.Handshake], in order to prevent indefinite blocking a deadline must be set for both Read and

RemoteAddr returns the remote network address.

ResumptionMasterSecret derives the resumption_master_secret from the master secret and the transcript up to the client Finished.

ServerApplicationTrafficSecret derives the server_application_traffic_secret_0 from the master secret and the transcript up to the server Finished.

ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from the handshake secret and the transcript up to the ServerHello.

SupportsCertificate returns nil if the provided certificate is supported by the client that sent the ClientHello. Otherwise, it returns an error descr

Int63 is equivalent to math/read.Uint64.

WriteTo writes Go source code to w that contains the recorded traffic.

active increments the number of references to the entry, wraps the certificate in the entry in an activeCert, and sets the finalizer. Note that there

ekmFromMasterSecret generates exported keying material as defined in RFC 5705.

[uTLS SECTION END] func encodeInnerClientHello(inner *clientHelloMsg, maxNameLength int) ([]byte, error) {

fipsAllowedChains returns chains that are allowed to be used in a TLS connection based on the current fips140tls enforcement setting. If fips140tls i

getCertificate returns the best certificate for the given ClientHelloInfo, defaulting to the first element of c.Certificates.

[uTLS] SECTION BEGIN

handlePostHandshakeMessage processes a handshake message arrived after the handshake is complete. Up to TLS 1.2, it indicates the start of a renegotia

marshalWithoutBinders returns the ClientHello through the PreSharedKeyExtension.identities field, according to RFC 8446, Section 4.2.11.2. Note that m

masterFromPreMasterSecret generates the master secret from the pre-master secret. See RFC 5246, Section 8.1.

mutualVersion returns the protocol version to use given the advertised versions of the peer. Priority is given to the peer preference order.

newPRNGWithSeed initializes a new PRNG using an existing seed.

This file contains tests derived from draft-ietf-tls-tls13-vectors-07.

processCertsFromClient takes a chain of client certificates either from a Certificates message and verifies them.

readClientHello reads a ClientHello message and selects the protocol version.

readRecordOrCCS reads one or more TLS records from the connection and updates the record layer state. Some invariants: - c.in must be locked - c.input

requiresClientCert reports whether the ClientAuthType requires a client certificate to be provided.

retryReadRecord recurs into readRecordOrCCS to drop a non-advancing record, like a warning alert, empty application_data, or a change_cipher_spec in T

ticketKeys returns the ticketKeys for this connection. If configForClient has explicitly set keys, those will be returned. Otherwise, the keys on c wi

tls10MAC implements the TLS 1.0 MAC function. RFC 2246, Section 6.2.3.

updateBinders updates the m.pskBinders field. The supplied binders must have the same length as the current m.pskBinders.

verifyServerCertificate parses and verifies the provided chain, setting c.verifiedChains and c.peerCertificates or sending the appropriate alert.

DialWithDialer connects to the given network address using dialer.Dial and then initiates a TLS handshake, returning the resulting TLS connection. Any

ExportKeyingMaterial returns length bytes of exported key material in a new slice as defined in RFC 5705. If context is nil, it is not used as part of

ExporterMasterSecret derives the exporter_master_secret from the master secret and the transcript up to the server Finished.

Handshake runs the client handshake using given clientHandshakeState Requires hs.hello, and, optionally, hs.session to be set.

InitializeByUtls is invoked when IsInitialized() returns false. It initializes the extension using a real and valid TLS 1.3 session.