Client returns a new TLS client side connection using conn as the underlying transport.

Dial connects to the given network address using net.Dial and then initiates a TLS handshake, returning the resulting TLS connection.

DialWithDialer connects to the given network address using dialer.Dial and then initiates a TLS handshake, returning the resulting TLS connection.

Listen creates a TLS listener accepting connections on the given network address using net.Listen.

LoadX509KeyPair reads and parses a public/private key pair from a pair of files.

NewListener creates a Listener which accepts connections from an inner Listener and wraps each connection with Server.

NewLRUClientSessionCache returns a ClientSessionCache with the given capacity that uses an LRU strategy.

Server returns a new TLS server side connection using conn as the underlying transport.

X509KeyPair parses a public/private key pair from a pair of PEM encoded data.

国密.

ECDSA algorithms.

Legacy signature and hash algorithms for TLS 1.2.

RSASSA-PKCS1-v1_5 algorithms.

RSASSA-PSS algorithms with public key OID rsaEncryption.

RenegotiateFreelyAsClient allows a remote server to repeatedly request renegotiation.

RenegotiateNever disables renegotiation.

RenegotiateOnceAsClient allows a remote server to request renegotiation once per connection.

Signature algorithms (for internal signaling use).

4865.

4866.

4867.

49161.

49187.

49195.

49162.

49196.

52393.

49159.

49170.

49171.

49191.

49199.

49172.

49200.

52392.

49169.

57361.

22016.

10.

47.

60.

156.

53.

157.

5.

A Certificate is a chain of one or more certificates, leaf first.

CertificateRequestInfo contains information from a server's CertificateRequest message, which is used to demand a certificate and proof of control from a client.

ClientHelloInfo contains information from a ClientHello message in order to guide certificate selection in the GetCertificate callback.

ClientSessionState contains the state needed by clients to resume TLS sessions.

A Config structure is used to configure a TLS client or server.

A Conn represents a secured connection.

ConnectionState records basic TLS details about the connection.

RecordHeaderError is returned when a TLS record header is invalid.

ClientSessionCache is a cache of ClientSessionState objects that can be used by a client to resume a TLS session with a given server.

ClientAuthType declares the policy the server will follow for TLS Client Authentication.

CurveID is the type of a TLS identifier for an elliptic curve.

RenegotiationSupport enumerates the different levels of support for TLS renegotiation.

SignatureScheme identifies a signature algorithm supported by TLS.