aghtls

func CertificateHasIP ¶

func CertificateHasIP(cert *x509.Certificate) (ok bool)

CertificateHasIP returns true if cert has at least a single IP address among its subjectAltNames.

func ParseCiphers ¶

func ParseCiphers(cipherNames []string) (cipherIDs []uint16, err error)

ParseCiphers parses a slice of cipher suites from cipher names.

func SaferCipherSuites ¶

func SaferCipherSuites() (safe []uint16)

SaferCipherSuites returns a set of default cipher suites with vulnerable and weak cipher suites removed.

func SystemRootCAs ¶

func SystemRootCAs() (roots *x509.CertPool)

SystemRootCAs tries to load root certificates from the operating system. It returns nil in case nothing is found so that Go' crypto/x509 can use its default algorithm to find system root CA list.

See https://github.com/AdguardTeam/AdGuardHome/issues/1311.