Package blockblame blames specific firewall manufacturers for blocking Tailscale, by analyzing the SSL certificate presented when attempting to connect to a remote server.

Config returns a tls.Config for connecting to a server.

NewTransport returns a new HTTP transport that verifies TLS certs using this package, including its baked-in LetsEncrypt fallback roots.

SetConfigExpectedCert modifies c to expect and verify that the server returns a certificate for the provided certDNSName.