tls

type Certificate struct {
	Certificate         []byte `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	Key                 []byte `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`
	CertificateFilepath string `protobuf:"bytes,4,opt,name=certificate_filepath,json=certificateFilepath,proto3" json:"certificate_filepath,omitempty"`
	KeyFilepath         string `protobuf:"bytes,5,opt,name=key_filepath,json=keyFilepath,proto3" json:"key_filepath,omitempty"`
	// contains filtered or unexported fields
}

type Conn struct {
	*tls.Conn
}

type Engine struct {
	// contains filtered or unexported fields
}

type EngineConfig struct {
	Config    *TlsConfig
	DnsServer i.ECHResolver
}

type ForceALPN int32

type Option func(*tls.Config)

type TlsConfig struct {

	// certs to be provided to peer
	Certificates []*Certificate `protobuf:"bytes,1,rep,name=certificates,proto3" json:"certificates,omitempty"`
	// certs to be used as root CA
	RootCas [][]byte `protobuf:"bytes,2,rep,name=root_cas,json=rootCas,proto3" json:"root_cas,omitempty"`
	// certs to issue certificates which will be provided to peer
	IssueCas []*Certificate `protobuf:"bytes,3,rep,name=issue_cas,json=issueCas,proto3" json:"issue_cas,omitempty"`
	// if not specified, the server name will be destination domain of the connection if
	// it is a domain
	ServerName              string   `protobuf:"bytes,4,opt,name=server_name,json=serverName,proto3" json:"server_name,omitempty"`
	DisableSystemRoot       bool     `protobuf:"varint,5,opt,name=disable_system_root,json=disableSystemRoot,proto3" json:"disable_system_root,omitempty"`
	AllowInsecure           bool     `protobuf:"varint,6,opt,name=allow_insecure,json=allowInsecure,proto3" json:"allow_insecure,omitempty"`
	NextProtocol            []string `protobuf:"bytes,7,rep,name=next_protocol,json=nextProtocol,proto3" json:"next_protocol,omitempty"`
	EnableSessionResumption bool     `` /* 133-byte string literal not displayed */
	// A list of byte slice, each of which is a hash of a cert chain.
	PinnedPeerCertificateChainSha256 [][]byte `` /* 163-byte string literal not displayed */
	VerifyClientCertificate          bool     `` /* 134-byte string literal not displayed */
	// utls-related
	Imitate string `protobuf:"bytes,11,opt,name=imitate,proto3" json:"imitate,omitempty"`
	// utls-related
	NoSNI bool `protobuf:"varint,12,opt,name=noSNI,proto3" json:"noSNI,omitempty"`
	// utls-related
	ForceAlpn    ForceALPN `protobuf:"varint,13,opt,name=force_alpn,json=forceAlpn,proto3,enum=x.tls.ForceALPN" json:"force_alpn,omitempty"`
	MasterKeyLog string    `protobuf:"bytes,14,opt,name=master_key_log,json=masterKeyLog,proto3" json:"master_key_log,omitempty"`
	// server ech key
	EchKey []byte `protobuf:"bytes,15,opt,name=ech_key,json=echKey,proto3" json:"ech_key,omitempty"`
	// client ech config
	EchConfig []byte `protobuf:"bytes,16,opt,name=ech_config,json=echConfig,proto3" json:"ech_config,omitempty"`
	// client only
	// enable ech
	EnableEch bool `protobuf:"varint,17,opt,name=enable_ech,json=enableEch,proto3" json:"enable_ech,omitempty"`
	// contains filtered or unexported fields
}

type UConn struct {
	*utls.UConn
}