}
		CACertPool = x509.NewCertPool()
		CACertPool.AppendCertsFromPEM(CACert)
	}
	if CACertPool != nil {
		if config == nil {
			config = &tls.Config{}
		}
		config.RootCAs = CACertPool
	}
	return config, nil
}

// configCertAndKey configures and returns a reference to tls.Config instance if CertFile and KeyFile pair is provided

	}).ts

	certpool := x509.NewCertPool()
	certpool.AddCert(ts.Certificate())

	c := &Client{Transport: &Transport{
		TLSClientConfig: &tls.Config{
			ServerName: "dns-is-faked.golang",
			RootCAs:    certpool,
		},
	}}

	trace := &httptrace.ClientTrace{
		TLSHandshakeStart: func() { logf("TLSHandshakeStart") },
		TLSHandshakeDone: func(s tls.ConnectionState, err error) {

		{"Config.NameToCertificate", Field, 0},
		{"Config.NextProtos", Field, 0},
		{"Config.PreferServerCipherSuites", Field, 1},
		{"Config.Rand", Field, 0},
		{"Config.Renegotiation", Field, 7},
		{"Config.RootCAs", Field, 0},
		{"Config.ServerName", Field, 0},
		{"Config.SessionTicketKey", Field, 1},
		{"Config.SessionTicketsDisabled", Field, 1},
		{"Config.Time", Field, 0},
		{"Config.UnwrapSession", Field, 21},

pkg crypto/tls, type Config struct, NameToCertificate map[string]*Certificate
pkg crypto/tls, type Config struct, NextProtos []string
pkg crypto/tls, type Config struct, Rand io.Reader
pkg crypto/tls, type Config struct, RootCAs *x509.CertPool
pkg crypto/tls, type Config struct, ServerName string
pkg crypto/tls, type Config struct, Time func() time.Time
pkg crypto/tls, type Conn struct
pkg crypto/tls, type ConnectionState struct