mattsurabian / go-tls Goto Github PK

Since this implementation is the full encapsulation of client and server there isn't a need to support a huge list of cipher suites, a single one will suffice.

I wanted to opt for TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 as in my opinion this is the most modern and secure suite available. However TLS negotiation fails on the client with remote error: handshake failure. The same error is seen when using TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA.

I don't feel I have enough knowledge of the problem to report a bug to Golang, so I'm creating this issue to keep track of information as I find it. All non ECDSA cipher suites work fine.

This can be tested by modifying the source, rebuilding and trying to send a message from the client to the running server.