git » chasquid » commit 16d9d45

diff --git a/internal/tlsconst/ciphers.go b/internal/tlsconst/ciphers.go
new file mode 100644
index 0000000..d45c468
--- /dev/null
+++ b/internal/tlsconst/ciphers.go
@@ -0,0 +1,334 @@
+package tlsconst
+
+// AUTOGENERATED - DO NOT EDIT
+//
+// This file was autogenerated by generate-ciphers.py.
+
+var cipherSuiteName = map[uint16]string{
+	0x0000: "TLS_NULL_WITH_NULL_NULL",
+	0x0001: "TLS_RSA_WITH_NULL_MD5",
+	0x0002: "TLS_RSA_WITH_NULL_SHA",
+	0x0003: "TLS_RSA_EXPORT_WITH_RC4_40_MD5",
+	0x0004: "TLS_RSA_WITH_RC4_128_MD5",
+	0x0005: "TLS_RSA_WITH_RC4_128_SHA",
+	0x0006: "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
+	0x0007: "TLS_RSA_WITH_IDEA_CBC_SHA",
+	0x0008: "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA",
+	0x0009: "TLS_RSA_WITH_DES_CBC_SHA",
+	0x000a: "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+	0x000b: "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
+	0x000c: "TLS_DH_DSS_WITH_DES_CBC_SHA",
+	0x000d: "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA",
+	0x000e: "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
+	0x000f: "TLS_DH_RSA_WITH_DES_CBC_SHA",
+	0x0010: "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA",
+	0x0011: "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+	0x0012: "TLS_DHE_DSS_WITH_DES_CBC_SHA",
+	0x0013: "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+	0x0014: "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+	0x0015: "TLS_DHE_RSA_WITH_DES_CBC_SHA",
+	0x0016: "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+	0x0017: "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5",
+	0x0018: "TLS_DH_anon_WITH_RC4_128_MD5",
+	0x0019: "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+	0x001a: "TLS_DH_anon_WITH_DES_CBC_SHA",
+	0x001b: "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA",
+	0x001e: "TLS_KRB5_WITH_DES_CBC_SHA",
+	0x001f: "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
+	0x0020: "TLS_KRB5_WITH_RC4_128_SHA",
+	0x0021: "TLS_KRB5_WITH_IDEA_CBC_SHA",
+	0x0022: "TLS_KRB5_WITH_DES_CBC_MD5",
+	0x0023: "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
+	0x0024: "TLS_KRB5_WITH_RC4_128_MD5",
+	0x0025: "TLS_KRB5_WITH_IDEA_CBC_MD5",
+	0x0026: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+	0x0027: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
+	0x0028: "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
+	0x0029: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+	0x002a: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
+	0x002b: "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
+	0x002c: "TLS_PSK_WITH_NULL_SHA",
+	0x002d: "TLS_DHE_PSK_WITH_NULL_SHA",
+	0x002e: "TLS_RSA_PSK_WITH_NULL_SHA",
+	0x002f: "TLS_RSA_WITH_AES_128_CBC_SHA",
+	0x0030: "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
+	0x0031: "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
+	0x0032: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
+	0x0033: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
+	0x0034: "TLS_DH_anon_WITH_AES_128_CBC_SHA",
+	0x0035: "TLS_RSA_WITH_AES_256_CBC_SHA",
+	0x0036: "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
+	0x0037: "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
+	0x0038: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
+	0x0039: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
+	0x003a: "TLS_DH_anon_WITH_AES_256_CBC_SHA",
+	0x003b: "TLS_RSA_WITH_NULL_SHA256",
+	0x003c: "TLS_RSA_WITH_AES_128_CBC_SHA256",
+	0x003d: "TLS_RSA_WITH_AES_256_CBC_SHA256",
+	0x003e: "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
+	0x003f: "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
+	0x0040: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
+	0x0041: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
+	0x0042: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
+	0x0043: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
+	0x0044: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
+	0x0045: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
+	0x0046: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
+	0x0067: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
+	0x0068: "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
+	0x0069: "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
+	0x006a: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
+	0x006b: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
+	0x006c: "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
+	0x006d: "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
+	0x0084: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
+	0x0085: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
+	0x0086: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
+	0x0087: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
+	0x0088: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
+	0x0089: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
+	0x008a: "TLS_PSK_WITH_RC4_128_SHA",
+	0x008b: "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
+	0x008c: "TLS_PSK_WITH_AES_128_CBC_SHA",
+	0x008d: "TLS_PSK_WITH_AES_256_CBC_SHA",
+	0x008e: "TLS_DHE_PSK_WITH_RC4_128_SHA",
+	0x008f: "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
+	0x0090: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
+	0x0091: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
+	0x0092: "TLS_RSA_PSK_WITH_RC4_128_SHA",
+	0x0093: "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
+	0x0094: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
+	0x0095: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
+	0x0096: "TLS_RSA_WITH_SEED_CBC_SHA",
+	0x0097: "TLS_DH_DSS_WITH_SEED_CBC_SHA",
+	0x0098: "TLS_DH_RSA_WITH_SEED_CBC_SHA",
+	0x0099: "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
+	0x009a: "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
+	0x009b: "TLS_DH_anon_WITH_SEED_CBC_SHA",
+	0x009c: "TLS_RSA_WITH_AES_128_GCM_SHA256",
+	0x009d: "TLS_RSA_WITH_AES_256_GCM_SHA384",
+	0x009e: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
+	0x009f: "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
+	0x00a0: "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
+	0x00a1: "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
+	0x00a2: "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
+	0x00a3: "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
+	0x00a4: "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
+	0x00a5: "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
+	0x00a6: "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
+	0x00a7: "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
+	0x00a8: "TLS_PSK_WITH_AES_128_GCM_SHA256",
+	0x00a9: "TLS_PSK_WITH_AES_256_GCM_SHA384",
+	0x00aa: "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
+	0x00ab: "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
+	0x00ac: "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
+	0x00ad: "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
+	0x00ae: "TLS_PSK_WITH_AES_128_CBC_SHA256",
+	0x00af: "TLS_PSK_WITH_AES_256_CBC_SHA384",
+	0x00b0: "TLS_PSK_WITH_NULL_SHA256",
+	0x00b1: "TLS_PSK_WITH_NULL_SHA384",
+	0x00b2: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
+	0x00b3: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
+	0x00b4: "TLS_DHE_PSK_WITH_NULL_SHA256",
+	0x00b5: "TLS_DHE_PSK_WITH_NULL_SHA384",
+	0x00b6: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
+	0x00b7: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
+	0x00b8: "TLS_RSA_PSK_WITH_NULL_SHA256",
+	0x00b9: "TLS_RSA_PSK_WITH_NULL_SHA384",
+	0x00ba: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00bb: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00bc: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00bd: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00be: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00bf: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
+	0x00c0: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00c1: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00c2: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00c3: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00c4: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00c5: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
+	0x00ff: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+	0x5600: "TLS_FALLBACK_SCSV",
+	0xc001: "TLS_ECDH_ECDSA_WITH_NULL_SHA",
+	0xc002: "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
+	0xc003: "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+	0xc004: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+	0xc005: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+	0xc006: "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
+	0xc007: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+	0xc008: "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+	0xc009: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+	0xc00a: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+	0xc00b: "TLS_ECDH_RSA_WITH_NULL_SHA",
+	0xc00c: "TLS_ECDH_RSA_WITH_RC4_128_SHA",
+	0xc00d: "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+	0xc00e: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
+	0xc00f: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
+	0xc010: "TLS_ECDHE_RSA_WITH_NULL_SHA",
+	0xc011: "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+	0xc012: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+	0xc013: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+	0xc014: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+	0xc015: "TLS_ECDH_anon_WITH_NULL_SHA",
+	0xc016: "TLS_ECDH_anon_WITH_RC4_128_SHA",
+	0xc017: "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+	0xc018: "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
+	0xc019: "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
+	0xc01a: "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
+	0xc01b: "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
+	0xc01c: "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
+	0xc01d: "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
+	0xc01e: "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
+	0xc01f: "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
+	0xc020: "TLS_SRP_SHA_WITH_AES_256_CBC_SHA",
+	0xc021: "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
+	0xc022: "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
+	0xc023: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+	0xc024: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+	0xc025: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+	0xc026: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+	0xc027: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+	0xc028: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+	0xc029: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+	0xc02a: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+	0xc02b: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
+	0xc02c: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+	0xc02d: "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+	0xc02e: "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+	0xc02f: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+	0xc030: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+	0xc031: "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+	0xc032: "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+	0xc033: "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
+	0xc034: "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
+	0xc035: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
+	0xc036: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
+	0xc037: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
+	0xc038: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
+	0xc039: "TLS_ECDHE_PSK_WITH_NULL_SHA",
+	0xc03a: "TLS_ECDHE_PSK_WITH_NULL_SHA256",
+	0xc03b: "TLS_ECDHE_PSK_WITH_NULL_SHA384",
+	0xc03c: "TLS_RSA_WITH_ARIA_128_CBC_SHA256",
+	0xc03d: "TLS_RSA_WITH_ARIA_256_CBC_SHA384",
+	0xc03e: "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256",
+	0xc03f: "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384",
+	0xc040: "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256",
+	0xc041: "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384",
+	0xc042: "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256",
+	0xc043: "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384",
+	0xc044: "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256",
+	0xc045: "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384",
+	0xc046: "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256",
+	0xc047: "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384",
+	0xc048: "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256",
+	0xc049: "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384",
+	0xc04a: "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256",
+	0xc04b: "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384",
+	0xc04c: "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256",
+	0xc04d: "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384",
+	0xc04e: "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256",
+	0xc04f: "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384",
+	0xc050: "TLS_RSA_WITH_ARIA_128_GCM_SHA256",
+	0xc051: "TLS_RSA_WITH_ARIA_256_GCM_SHA384",
+	0xc052: "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256",
+	0xc053: "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384",
+	0xc054: "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256",
+	0xc055: "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384",
+	0xc056: "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256",
+	0xc057: "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384",
+	0xc058: "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256",
+	0xc059: "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384",
+	0xc05a: "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256",
+	0xc05b: "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384",
+	0xc05c: "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256",
+	0xc05d: "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384",
+	0xc05e: "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256",
+	0xc05f: "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384",
+	0xc060: "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
+	0xc061: "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384",
+	0xc062: "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256",
+	0xc063: "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384",
+	0xc064: "TLS_PSK_WITH_ARIA_128_CBC_SHA256",
+	0xc065: "TLS_PSK_WITH_ARIA_256_CBC_SHA384",
+	0xc066: "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256",
+	0xc067: "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384",
+	0xc068: "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256",
+	0xc069: "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384",
+	0xc06a: "TLS_PSK_WITH_ARIA_128_GCM_SHA256",
+	0xc06b: "TLS_PSK_WITH_ARIA_256_GCM_SHA384",
+	0xc06c: "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256",
+	0xc06d: "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384",
+	0xc06e: "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256",
+	0xc06f: "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384",
+	0xc070: "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256",
+	0xc071: "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384",
+	0xc072: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc073: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc074: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc075: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc076: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc077: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc078: "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc079: "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc07a: "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc07b: "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc07c: "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc07d: "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc07e: "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc07f: "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc080: "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc081: "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc082: "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc083: "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc084: "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc085: "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc086: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc087: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc088: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc089: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc08a: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc08b: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc08c: "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc08d: "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc08e: "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc08f: "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc090: "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc091: "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc092: "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+	0xc093: "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+	0xc094: "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc095: "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc096: "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc097: "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc098: "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc099: "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc09a: "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+	0xc09b: "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+	0xc09c: "TLS_RSA_WITH_AES_128_CCM",
+	0xc09d: "TLS_RSA_WITH_AES_256_CCM",
+	0xc09e: "TLS_DHE_RSA_WITH_AES_128_CCM",
+	0xc09f: "TLS_DHE_RSA_WITH_AES_256_CCM",
+	0xc0a0: "TLS_RSA_WITH_AES_128_CCM_8",
+	0xc0a1: "TLS_RSA_WITH_AES_256_CCM_8",
+	0xc0a2: "TLS_DHE_RSA_WITH_AES_128_CCM_8",
+	0xc0a3: "TLS_DHE_RSA_WITH_AES_256_CCM_8",
+	0xc0a4: "TLS_PSK_WITH_AES_128_CCM",
+	0xc0a5: "TLS_PSK_WITH_AES_256_CCM",
+	0xc0a6: "TLS_DHE_PSK_WITH_AES_128_CCM",
+	0xc0a7: "TLS_DHE_PSK_WITH_AES_256_CCM",
+	0xc0a8: "TLS_PSK_WITH_AES_128_CCM_8",
+	0xc0a9: "TLS_PSK_WITH_AES_256_CCM_8",
+	0xc0aa: "TLS_PSK_DHE_WITH_AES_128_CCM_8",
+	0xc0ab: "TLS_PSK_DHE_WITH_AES_256_CCM_8",
+	0xc0ac: "TLS_ECDHE_ECDSA_WITH_AES_128_CCM",
+	0xc0ad: "TLS_ECDHE_ECDSA_WITH_AES_256_CCM",
+	0xc0ae: "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8",
+	0xc0af: "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8",
+	0xcca8: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+	0xcca9: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+	0xccaa: "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+	0xccab: "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256",
+	0xccac: "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
+	0xccad: "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
+	0xccae: "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256",
+}
diff --git a/internal/tlsconst/generate-ciphers.py b/internal/tlsconst/generate-ciphers.py
new file mode 100755
index 0000000..a60635a
--- /dev/null
+++ b/internal/tlsconst/generate-ciphers.py
@@ -0,0 +1,54 @@
+#!/usr/bin/env python3
+#
+# This hacky script generates a go file with a map of version -> name for the
+# entries in the TLS Cipher Suite Registry.
+
+import csv
+import urllib.request
+import sys
+
+# Where to get the TLS parameters from.
+# See http://www.iana.org/assignments/tls-parameters/tls-parameters.xml.
+URL = "https://www.iana.org/assignments/tls-parameters/tls-parameters-4.csv"
+
+
+def getCiphers():
+	req = urllib.request.urlopen(URL)
+	data = req.read().decode('utf-8')
+
+	ciphers = []
+	reader = csv.DictReader(data.splitlines())
+	for row in reader:
+		desc = row["Description"]
+		rawval = row["Value"]
+
+		# Just plain TLS values for now, to keep it simple.
+		if "-" in rawval or not desc.startswith("TLS"):
+			continue
+
+		rv1, rv2 = rawval.split(",")
+		rv1, rv2 = int(rv1, 16), int(rv2, 16)
+
+		val = "0x%02x%02x" % (rv1, rv2)
+		ciphers.append((val, desc))
+
+	return ciphers
+
+
+ciphers = getCiphers()
+
+out = open(sys.argv[1], 'w')
+out.write("""\
+package tlsconst
+
+// AUTOGENERATED - DO NOT EDIT
+//
+// This file was autogenerated by generate-ciphers.py.
+
+var cipherSuiteName = map[uint16]string{
+""")
+
+for ver, desc in ciphers:
+	out.write('\t%s: "%s",\n' % (ver, desc))
+
+out.write('}\n')
diff --git a/internal/tlsconst/tlsconst.go b/internal/tlsconst/tlsconst.go
new file mode 100644
index 0000000..7a1a9e0
--- /dev/null
+++ b/internal/tlsconst/tlsconst.go
@@ -0,0 +1,32 @@
+// Package tlsconst contains TLS constants for human consumption.
+package tlsconst
+
+// Most of the constants get automatically generated from IANA's assignments.
+//go:generate ./generate-ciphers.py ciphers.go
+
+import "fmt"
+
+var versionName = map[uint16]string{
+	0x0300: "SSL-3.0",
+	0x0301: "TLS-1.0",
+	0x0302: "TLS-1.1",
+	0x0303: "TLS-1.2",
+}
+
+// VersionName returns a human-readable TLS version name.
+func VersionName(v uint16) string {
+	name, ok := versionName[v]
+	if !ok {
+		return fmt.Sprintf("TLS-%#04x", v)
+	}
+	return name
+}
+
+// CipherSuiteName returns a human-readable TLS cipher suite name.
+func CipherSuiteName(s uint16) string {
+	name, ok := cipherSuiteName[s]
+	if !ok {
+		return fmt.Sprintf("TLS_UNKNOWN_CIPHER_SUITE-%#04x", s)
+	}
+	return name
+}