tarantool / go-tlsdialer / 27931697744

0%

master: 0%

Pull #9

github

feat: add experimental pure-Go gostls backend

Add the CGO-free gostls TLS 1.2 engine as an opt-in backend in its own
sub-package (backend/gostls, gostls.New()), mirroring backend/openssl:

- gostls.go translates tlsdialer.Opts into a gostls.Config and dials.
- ciphers.go parses the OpenSSL cipher-list syntax into IANA suite IDs.
- keys.go loads PKCS#1 / PKCS#8 keys, including encrypted PKCS#8
  (PBES2 / PBKDF2-HMAC-SHA256 / AES-CBC), with no x/crypto dependency.

The backend is marked experimental: it is new and not yet production-proven,
and the github.com/bigbes/gostls library may still change. The cgo OpenSSL
backend remains the conservative choice. This is called out in the package
doc, gostls.New(), the README and the CHANGELOG.

Like the OpenSSL engine, gostls is selected explicitly via
OpenSSLDialer.Backend; a nil Backend still errors. The dialer links no
engine of its own, so a program stays cgo-free until it imports one.

The OpenSSL-only test files (integration_test.go, example_test.go,
dialer_test.go, backends_openssl_test.go) gain a //go:build openssl tag,
and the unified backend suite registers the gostls harness so its scenarios
run cgo-free by default and against both engines under -tags openssl.

gostls is pinned to the published github.com/bigbes/gostls v0.1.0 (and its
gostcrypto v0.1.0 dependency); it requires go 1.25.0. Because golangci-lint
v1 (built with go 1.24) refuses to lint a go 1.25 module, the lint job moves
to golangci-lint-action@v7 with a pinned v2 release and .golangci-lint.yaml
is migrated to the v2 schema (stylecheck folded into staticcheck, goimports
moved to the formatters section).

0 of 363 new or added lines in 3 files covered. (0.0%)

0 of 573 relevant lines covered (0.0%)

0.0 hits per line