tls

type BuffConn struct {
	// contains filtered or unexported fields
}

type Flag byte

type Payload struct {
	Flags  Flag
	Length uint32
	Data   []byte

	Inner protocol.Payload
	// contains filtered or unexported fields
}

type Settings struct {
	Config *tls.Config
	// VerifyPeerCertificate mirrors tls.Config.VerifyPeerCertificate while adding
	// protocol.Context. Note that Go does not invoke this callback on resumed
	// connections.
	VerifyPeerCertificate func(ctx protocol.Context, rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
	// VerifyConnection mirrors tls.Config.VerifyConnection while adding
	// protocol.Context. Prefer this hook for production-critical validation that
	// must also run on resumed connections.
	VerifyConnection func(ctx protocol.Context, cs tls.ConnectionState) error
	// HandshakeSuccessful runs after the TLS handshake has completed and the EAP
	// layer is ready to decide whether the authenticated client should proceed.
	HandshakeSuccessful func(ctx protocol.Context, certs []*x509.Certificate) protocol.Status
}

type State struct {
	RemainingChunks             [][]byte
	HandshakeDone               bool
	FinalStatus                 protocol.Status
	ClientHello                 *tls.ClientHelloInfo
	MPPEKey                     []byte
	TotalPayloadSize            int
	IncludeLengthInNextFragment bool
	TLS                         *tls.Conn
	Conn                        *BuffConn
	Context                     context.Context
	ContextCancel               context.CancelFunc
	HandshakeCtx                protocol.Context
	Logger                      protocol.Logger
	// contains filtered or unexported fields
}

type TLSConfig interface {
	TLSConfig() *tls.Config
}