Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

tls

package

Go to main page

Versions in this module

v2

v2.52.0

Sep 21, 2026

v2.51.0

Sep 21, 2026

v2.50.1

Sep 18, 2026

v2.50.0

Sep 18, 2026

Changes in this version

+ var ErrInvalidPEM = errors.New("invalid tls pem material")

+ type Manager struct

+ func NewWithConfig(cfg *Config) (*Manager, error)

+ func (m *Manager) TLSConfig() *stdtls.Config

v2.49.1

Sep 18, 2026

v2.49.0

Sep 16, 2026

Changes in this version

+ var ErrIncompleteKeyPair = errors.New("incomplete tls key pair")

+ var ErrInvalidCipherSuite = errors.New("invalid tls cipher suite")

+ var ErrInvalidClientAuth = errors.New("invalid tls client authentication")

+ var ErrInvalidVersion = errors.New("invalid tls version")

+ var ErrMissingClientCA = errors.New("no client certificate authority configured")

+ var ErrNoCertificate = errors.New("no tls serving certificate configured")

+ var ErrNoCipherSuite = errors.New("no usable tls cipher suite configured")

+ type CipherSuite string

+ func (s *CipherSuite) UnmarshalText(text []byte) error

+ type ClientAuthMode string

+ const ClientAuthOff

+ const ClientAuthOn

+ const ClientAuthOptional

+ const ClientAuthOptionalNoCA

+ const ClientAuthUnset

+ func (m *ClientAuthMode) UnmarshalText(text []byte) error

+ func (m ClientAuthMode) String() string

+ type Config struct

+ CertFile string

+ CipherSuites []CipherSuite

+ ClientAuth ClientAuthMode

+ ClientCAFiles []string

+ Enabled bool

+ KeyFile string

+ Logger *slog.Logger

+ MaxVersion Version

+ MinVersion Version

+ Name string

+ type Version string

+ const VersionTLS12

+ const VersionTLS13

+ const VersionUnset

+ func (v *Version) UnmarshalText(text []byte) error

+ func (v Version) String() string