Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

mtls

package module

Go to main page

Versions in this module

v0

v0.3.0

Jun 2, 2025

v0.2.1

Oct 11, 2024

v0.2.0

Sep 12, 2024

Changes in this version

type Identity

+ func CertificateIdentity(cert *x509.Certificate) Identity

+ func (i Identity) IsZero() bool

v0.1.0

Sep 9, 2024

Changes in this version

+ type Client struct

+ CipherSuites []uint16

+ Config *tls.Config

+ Dialer net.Dialer

+ GetPeerIdentity func(addr string) (Identity, bool)

+ MaxVersion uint16

+ MinVersion uint16

+ NextProtos []string

+ PeerIdentities map[string]Identity

+ PrivateKey PrivateKey

+ func (c *Client) DialTLSContext(ctx context.Context, network, addr string) (net.Conn, error)

+ type ECDSAPrivateKey struct

+ func GenerateKeyECDSA(curve elliptic.Curve, random io.Reader) (*ECDSAPrivateKey, error)

+ func (pk *ECDSAPrivateKey) Identity() Identity

+ func (pk *ECDSAPrivateKey) MarshalText() ([]byte, error)

+ func (pk *ECDSAPrivateKey) Private() crypto.PrivateKey

+ func (pk *ECDSAPrivateKey) Public() crypto.PublicKey

+ func (pk *ECDSAPrivateKey) String() string

+ func (pk *ECDSAPrivateKey) UnmarshalText(text []byte) error

+ type EdDSAPrivateKey struct

+ func GenerateKeyEdDSA(random io.Reader) (*EdDSAPrivateKey, error)

+ func (pk *EdDSAPrivateKey) Identity() Identity

+ func (pk *EdDSAPrivateKey) MarshalText() ([]byte, error)

+ func (pk *EdDSAPrivateKey) Private() crypto.PrivateKey

+ func (pk *EdDSAPrivateKey) Public() crypto.PublicKey

+ func (pk *EdDSAPrivateKey) String() string

+ func (pk *EdDSAPrivateKey) UnmarshalText(text []byte) error

+ type Identity struct

+ func ParseIdentity(s string) (Identity, error)

+ func PeerIdentity(state *tls.ConnectionState) (Identity, error)

+ func (i *Identity) UnmarshalBinary(b []byte) error

+ func (i *Identity) UnmarshalText(text []byte) error

+ func (i Identity) MarshalBinary() ([]byte, error)

+ func (i Identity) MarshalText() ([]byte, error)

+ func (i Identity) String() string

+ type IdentityError struct

+ Identity Identity

+ PeerIdentity Identity

+ func (e IdentityError) Error() string

+ type PrivateKey interface

+ Identity func() Identity

+ Private func() crypto.PrivateKey

+ Public func() crypto.PublicKey

+ String func() string

+ func ParsePrivateKey(s string) (PrivateKey, error)

+ type Server struct

+ CipherSuites []uint16

+ Config *tls.Config

+ MaxVersion uint16

+ MinVersion uint16

+ NextProtos []string

+ PeerIdentities []Identity

+ PrivateKey PrivateKey

+ VerifyPeerIdentity func(Identity) error

+ func (s *Server) GetConfigForClient(hello *tls.ClientHelloInfo) (*tls.Config, error)