sslconn | Experimental golang wrapper around OpenSSL | TLS library

sslconn is a Go library typically used in Security, TLS applications. sslconn has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

This is an experimental golang (CGO) wrapper around OpenSSL. The crypto/tls package does not support (1) SSLv2 compatible handshakes, so this is an attempt to use OpenSSL in golang. The reason SSLv2 handshake is desired is for compatibility (2) with a variety of clients. The suggested approach is to provide SSL termination upstream, however some protocols upgrade plain text connections using STARTTLS (3) which would require a smart and protocol aware SSL terminator. This wrapper only exposes only a tiny subset of the OpenSSL API, just enough to enable the use-case described above. In order to multiplex a OpenSSL connection the underlying IO needs to be non blocking. To support that, a NonBlockingReader and NonBlockingWriter were implemented to provide the necessary semantics. Most of the OpenSSL integration is done in C to avoid locking the OS thread required for error checking (thread locals.).