kubernetes/vendor/go.etcd.io/etcd/client/pkg/v3/transport/listener_tls.go

type tlsListener …

type tlsCheckFunc …

// NewTLSListener handshakes TLS connections and performs optional CRL checking.
func NewTLSListener(l net.Listener, tlsinfo *TLSInfo) (net.Listener, error) { … }

func newTLSListener(l net.Listener, tlsinfo *TLSInfo, check tlsCheckFunc) (net.Listener, error) { … }

func (l *tlsListener) Accept() (net.Conn, error) { … }

func checkSAN(ctx context.Context, tlsConn *tls.Conn) error { … }

// acceptLoop launches each TLS handshake in a separate goroutine
// to prevent a hanging TLS connection from blocking other connections.
func (l *tlsListener) acceptLoop() { … }

func checkCRL(crlPath string, cert []*x509.Certificate) error { … }

func checkCertSAN(ctx context.Context, cert *x509.Certificate, remoteAddr string) error { … }

func isHostInDNS(ctx context.Context, host string, dnsNames []string) (ok bool, err error) { … }

func (l *tlsListener) Close() error { … }