How to parse certification content before creating the tls.X509KeyPair?

[zxyao145]

We are using mTLS to connect to our ETCD server, and our certification file of private key is encrypted (and it must be encrypted), I need to decrypt it before creating tls.X509KeyPair. The parseFunc in TLSInfo seems to be able to achieve this, just like below:

tlsInfo := transport.TLSInfo{
	CertFile:      etcdConf.MTLS.CertFile,
	KeyFile:       etcdConf.MTLS.KeyFile,
	TrustedCAFile: etcdConf.MTLS.CaFile,
	parseFunc: func(certPEMBlock []byte, keyPEMBlock []byte) (tls.Certificate, error) {
		
+		decryptBytes, err := Decrypt(keyPEMBlock)

		// ....

		return tls.X509KeyPair(certPEMBlock, decryptBytes)
	},
}

but parseFunc is not a public method. Is there a better solution?