Dial returns a function suitable for dialing a connection to an InterceptingListener.

NewConn constructs a conn from a base TLS connection and possibly client next protos.

New creates a new listener based on the passed in listener (which should not be a TLS listener) and the given base TLS configuration.

ClientInfo allows us to pass information back from the TLS handshake.

Conn embeds a *tls.Conn and allows us to add extra bits into it.

InterceptingListener is a listener that transparently handles fetch and auth flows if the right ALPN protos are found, and passes through otherwise.

InterceptingListenerConfiguration contains config information for InterceptingListener.

FetchCredsFn is a function that is used when a node requests fetching its initial credentials.

GenerateServerCertificatesFn is a function that is used when a node is connecting by the upstream node to fetch a certificate to present to the node.