123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657 |
- package net
- import (
- "crypto/tls"
- "fmt"
- "net"
- "time"
- libnet "github.com/fatedier/golib/net"
- )
- var FRPTLSHeadByte = 0x17
- func CheckAndEnableTLSServerConnWithTimeout(
- c net.Conn, tlsConfig *tls.Config, tlsOnly bool, timeout time.Duration,
- ) (out net.Conn, isTLS bool, custom bool, err error) {
- sc, r := libnet.NewSharedConnSize(c, 2)
- buf := make([]byte, 1)
- var n int
- _ = c.SetReadDeadline(time.Now().Add(timeout))
- n, err = r.Read(buf)
- _ = c.SetReadDeadline(time.Time{})
- if err != nil {
- return
- }
- switch {
- case n == 1 && int(buf[0]) == FRPTLSHeadByte:
- out = tls.Server(c, tlsConfig)
- isTLS = true
- custom = true
- case n == 1 && int(buf[0]) == 0x16:
- out = tls.Server(sc, tlsConfig)
- isTLS = true
- default:
- if tlsOnly {
- err = fmt.Errorf("non-TLS connection received on a TlsOnly server")
- return
- }
- out = sc
- }
- return
- }
|