}
}
func _() {
	// An "invalid array index" compiler error signifies that the constant values have changed.
	// Re-run the stringer command to generate them again.
	var x [1]struct{}
	_ = x[NoClientCert-0]
	_ = x[RequestClientCert-1]
	_ = x[RequireAnyClientCert-2]
	_ = x[VerifyClientCertIfGiven-3]
	_ = x[RequireAndVerifyClientCert-4]
}

	needClientCerts := requiresClientCert(c.config.ClientAuth)
	if needClientCerts && !sessionHasClientCerts {
		return nil
	}
	if sessionHasClientCerts && c.config.ClientAuth == NoClientCert {
		return nil
	}
	if sessionHasClientCerts && c.config.time().After(sessionState.peerCertificates[0].NotAfter) {
		return nil
	}
	if sessionHasClientCerts && c.config.ClientAuth >= VerifyClientCertIfGiven &&

// ClientAuthType declares the policy the server will follow for
// TLS Client Authentication.
type ClientAuthType int

const (
	// NoClientCert indicates that no client certificate should be requested
	// during the handshake, and if any certificates are sent they will not
	// be verified.
	NoClientCert ClientAuthType = iota
	// RequestClientCert indicates that a client certificate should be requested

					}
					return checkFields(c, called, "client")
				}
			},
		},
		{
			name: "NoClientCert",
			configureServer: func(config *Config, called *int) {
				config.ClientAuth = NoClientCert
				config.VerifyConnection = func(c ConnectionState) error {
					*called++
					return checkFields(c, called, "server")
				}
			},

		needClientCerts := requiresClientCert(c.config.ClientAuth)
		if needClientCerts && !sessionHasClientCerts {
			continue
		}
		if sessionHasClientCerts && c.config.ClientAuth == NoClientCert {
			continue
		}
		if sessionHasClientCerts && c.config.time().After(sessionState.peerCertificates[0].NotAfter) {
			continue
		}
		if sessionHasClientCerts && c.config.ClientAuth >= VerifyClientCertIfGiven &&

				clientConfig.Certificates = nil
			}

			if _, _, err := testHandshake(t, clientConfig, serverConfig); err != nil {
				t.Fatal(err)
			}

			want := serverConfig.ClientAuth != NoClientCert
			if serverVerifyPeerCertificates != want {
				t.Errorf("VerifyPeerCertificates on the server: got %v, want %v",
					serverVerifyPeerCertificates, want)
			}
			if !clientVerifyPeerCertificates {

		{"InsecureCipherSuites", Func, 14},
		{"Listen", Func, 0},
		{"LoadX509KeyPair", Func, 0},
		{"NewLRUClientSessionCache", Func, 3},
		{"NewListener", Func, 0},
		{"NewResumptionState", Func, 21},
		{"NoClientCert", Const, 0},
		{"PKCS1WithSHA1", Const, 8},
		{"PKCS1WithSHA256", Const, 8},
		{"PKCS1WithSHA384", Const, 8},
		{"PKCS1WithSHA512", Const, 8},
		{"PSSWithSHA256", Const, 8},
		{"PSSWithSHA384", Const, 8},

pkg crypto/subtle, func ConstantTimeCopy(int, []uint8, []uint8)
pkg crypto/subtle, func ConstantTimeEq(int32, int32) int
pkg crypto/subtle, func ConstantTimeSelect(int, int, int) int
pkg crypto/tls, const NoClientCert ClientAuthType
pkg crypto/tls, const RequestClientCert ClientAuthType
pkg crypto/tls, const RequireAndVerifyClientCert ClientAuthType
pkg crypto/tls, const RequireAnyClientCert ClientAuthType

pkg crypto/sha256, const Size = 32
pkg crypto/sha256, const Size224 = 28
pkg crypto/sha512, const BlockSize = 128
pkg crypto/sha512, const Size = 64
pkg crypto/sha512, const Size384 = 48
pkg crypto/tls, const NoClientCert = 0
pkg crypto/tls, const RequestClientCert = 1
pkg crypto/tls, const RequireAndVerifyClientCert = 4
pkg crypto/tls, const RequireAnyClientCert = 2
pkg crypto/tls, const TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA = 49170