tls

type ClientHello struct {
	ProtocolVersion    ProtocolVersion `json:"protocol_version"`
	Random             Random          `json:"random"`
	SessionID          []byte          `json:"session_id"`
	CipherSuites       [][2]uint8      `json:"cipher_suites"`
	CompressionMethods []uint8         `json:"compression_methods"`
	Extensions         []Extension     `json:"extensions"`
}

type Extension struct {
	Type   ExtensionType `json:"type"`
	Data   []byte        `json:"data"`
	Struct interface{}   `json:"struct"`
}

type ExtensionType uint16

type ProtocolVersion struct {
	Minor uint8
	Major uint8
}

type Random struct {
	GMTUnixTime uint32   `json:"gmt_unix_time"`
	RandomBytes [28]byte `json:"random_bytes"`
}

type ServerName struct {
	NameType ServerNameType `json:"name_type"`
	HostName string         `json:"host_name"`
}

type ServerNameList struct {
	ServerNames []ServerName `json:"server_names"`
}

type ServerNameType uint8

type TLSSettings struct {
	ServerName         string   `json:"server_name"`
	VerifyClient       bool     `json:"verify_client"`
	RequestClientCert  bool     `json:"request_client_cert"`
	CACertificateFiles []string `json:"ca_certificate_files"`
	CertificateFile    string   `json:"certificate_file"`
	KeyFile            string   `json:"key_file"`

	// This switch only exists to accomodate the inability of certain
	// certificate authorities to provide TLS certificates with
	// the necessary rights. Since key pinning is used to verify certificates
	// in addition to the normal TLS verification enabling this will not
	// destroy the systems' security, although it will weaken it.
	// So please do not set this to true...
	InsecureSkipVerify bool `json:"insecure_skip_verify"`
}