fixup! Upgrade to github.com/pion/dtls/v3

dtls/client.go

@@ -98,7 +98,7 @@ func Client(conn *dtls.Conn, opts ...udp.Option) *udpClient.Conn {
 	}
 
 	monitor := cfg.CreateInactivityMonitor()
-	l := coapNet.NewConn(conn)
+	l := coapNet.NewDTLSConn(conn)
 	session := server.NewSession(cfg.Ctx,
 		l,
 		cfg.MaxMessageSize,

dtls/server/server.go

@@ -165,7 +165,7 @@ func (s *Server) Serve(l Listener) error {
 		wg.Add(1)
 		inactivityMonitor := s.cfg.CreateInactivityMonitor()
 		requestMonitor := s.cfg.RequestMonitor
-		cc := s.createConn(coapNet.NewConn(rw), inactivityMonitor, requestMonitor)
+		cc := s.createConn(coapNet.NewDTLSConn(rw), inactivityMonitor, requestMonitor)
 		if s.cfg.OnNewConn != nil {
 			s.cfg.OnNewConn(cc)
 		}

dtls/server_test.go

@@ -151,41 +151,37 @@ func TestServerSetContextValueWithPKI(t *testing.T) {
 		require.NoError(t, errC)
 	}()
 
-	onNewConn := func(cc *client.Conn) {
-		dtlsConn, ok := cc.NetConn().(*piondtls.Conn)
-		require.True(t, ok)
-		state, k := dtlsConn.ConnectionState()
-		require.True(t, k)
-		// set connection context certificate
-		clientCert, errP := x509.ParseCertificate(state.PeerCertificates[0])
-		require.NoError(t, errP)
-		cc.SetContextValue("client-cert", clientCert)
-	}
 	handle := func(w *responsewriter.ResponseWriter[*client.Conn], r *pool.Message) {
 		// get certificate from connection context
 		var clientCert *x509.Certificate
 		value := r.Context().Value("client-cert")
 		if value == nil {
 			dtlsConn, ok := w.Conn().NetConn().(*piondtls.Conn)
-			require.True(t, ok)
-			state, k := dtlsConn.ConnectionState()
-			require.True(t, k)
+			assert.True(t, ok)
+			state, ok := dtlsConn.ConnectionState()
+			assert.True(t, ok)
 			var errP error
 			clientCert, errP = x509.ParseCertificate(state.PeerCertificates[0])
-			require.NoError(t, errP)
+			assert.NoError(t, errP) //nolint:testifylint
 			w.Conn().SetContextValue("client-cert", clientCert)
 		} else {
 			clientCert = r.Context().Value("client-cert").(*x509.Certificate)
 		}
-		require.Equal(t, clientCert.SerialNumber, clientSerial)
-		require.NotNil(t, clientCert)
+		assert.Equal(t, clientCert.SerialNumber, clientSerial)
+		assert.NotNil(t, clientCert)
 		errH := w.SetResponse(codes.Content, message.TextPlain, bytes.NewReader([]byte("done")))
-		require.NoError(t, errH)
+		assert.NoError(t, errH)
 	}
 
-	sd := dtls.NewServer(options.WithHandlerFunc(handle), options.WithOnNewConn(onNewConn))
-	defer sd.Stop()
+	sd := dtls.NewServer(options.WithHandlerFunc(handle))
+	var wg sync.WaitGroup
+	defer func() {
+		sd.Stop()
+		wg.Wait()
+	}()
+	wg.Add(1)
 	go func() {
+		defer wg.Done()
 		errS := sd.Serve(ld)
 		assert.NoError(t, errS)
 	}()

net/conn.go

@@ -9,20 +9,45 @@ import (
 	"go.uber.org/atomic"
 )
 
+type ConnOption interface {
+	Apply(*ConnConfig)
+}
+
+type ConnConfig struct {
+	disabledManualCloseAfterHandshake bool
+}
+
+func (h ConnConfig) Apply(o *ConnConfig) {
+	o.disabledManualCloseAfterHandshake = h.disabledManualCloseAfterHandshake
+}
+
+func WithDisabledManualCloseAfterHandshake() ConnConfig {
+	return ConnConfig{
+		disabledManualCloseAfterHandshake: true,
+	}
+}
+
 // Conn is a generic stream-oriented network connection that provides Read/Write with context.
 //
 // Multiple goroutines may invoke methods on a Conn simultaneously.
 type Conn struct {
 	connection       net.Conn
 	closed           atomic.Bool
+	cfg              ConnConfig
 	handshakeContext func(ctx context.Context) error
 	lock             sync.Mutex
 }
 
 // NewConn creates connection over net.Conn.
-func NewConn(c net.Conn) *Conn {
+func NewConn(c net.Conn, opts ...ConnOption) *Conn {
+	cfg := ConnConfig{}
+	for _, o := range opts {
+		o.Apply(&cfg)
+	}
+
 	connection := Conn{
 		connection: c,
+		cfg:        cfg,
 	}
 
 	if v, ok := c.(interface {
@@ -34,6 +59,10 @@ func NewConn(c net.Conn) *Conn {
 	return &connection
 }
 
+func NewDTLSConn(c net.Conn) *Conn {
+	return NewConn(c, WithDisabledManualCloseAfterHandshake())
+}
+
 // LocalAddr returns the local network address. The Addr returned is shared by all invocations of LocalAddr, so do not modify it.
 func (c *Conn) LocalAddr() net.Addr {
 	return c.connection.LocalAddr()
@@ -63,11 +92,14 @@ func (c *Conn) handshake(ctx context.Context) error {
 		if err == nil {
 			return nil
 		}
-		errC := c.Close()
-		if errC == nil {
-			return err
+		if !c.cfg.disabledManualCloseAfterHandshake {
+			errC := c.Close()
+			if errC == nil {
+				return err
+			}
+			return fmt.Errorf("%v", []error{err, errC})
 		}
-		return fmt.Errorf("%v", []error{err, errC})
+		return err
 	}
 	return nil
 }