fails

var AttemptedTLSWithNonTLSBackend = ClassifierFunc(func(err error) bool {
	return errors.As(err, &tls.RecordHeaderError{})
})

var ConnectionResetOnRead = ClassifierFunc(func(err error) bool {
	var opErr *net.OpError
	if errors.As(err, &opErr) {
		return opErr.Err.Error() == "read: connection reset by peer"
	}
	return false
})

var ContextCancelled = ClassifierFunc(func(err error) bool {
	return errors.Is(err, context.Canceled)
})

var Dial = ClassifierFunc(func(err error) bool {
	var opErr *net.OpError
	if errors.As(err, &opErr) {
		return opErr.Op == "dial"
	}
	return false
})

var ExpiredOrNotYetValidCertFailure = ClassifierFunc(func(err error) bool {
	var certErr x509.CertificateInvalidError
	if errors.As(err, &certErr) {
		return certErr.Reason == x509.Expired
	}
	return false
})

var FailableClassifiers = ClassifierGroup{
	Dial,
	AttemptedTLSWithNonTLSBackend,
	HostnameMismatch,
	RemoteFailedCertCheck,
	RemoteHandshakeFailure,
	RemoteHandshakeTimeout,
	UntrustedCert,
	ExpiredOrNotYetValidCertFailure,
	ConnectionResetOnRead,
}

var HostnameMismatch = ClassifierFunc(func(err error) bool {
	return errors.As(err, &x509.HostnameError{})
})

var IdempotentRequestEOF = ClassifierFunc(func(err error) bool {
	return errors.Is(err, IdempotentRequestEOFError)
})

var IdempotentRequestEOFError = errors.New("EOF (via idempotent request)")

var IncompleteRequest = ClassifierFunc(func(err error) bool {
	return errors.Is(err, IncompleteRequestError)
})

var IncompleteRequestError = errors.New("incomplete request")

var PrunableClassifiers = ClassifierGroup{
	Dial,
	AttemptedTLSWithNonTLSBackend,
	HostnameMismatch,
	RemoteFailedCertCheck,
	RemoteHandshakeFailure,
	RemoteHandshakeTimeout,
	UntrustedCert,
	ExpiredOrNotYetValidCertFailure,
}

var RemoteFailedCertCheck = ClassifierFunc(func(err error) bool {
	var opErr *net.OpError
	if errors.As(err, &opErr) {
		if opErr.Op == "remote error" {
			if opErr.Err.Error() == "tls: bad certificate" ||
				opErr.Err.Error() == "tls: unknown certificate authority" ||
				opErr.Err.Error() == "tls: certificate required" {
				return true
			}
		}
	}
	return false
})

var RemoteHandshakeFailure = ClassifierFunc(func(err error) bool {
	var opErr *net.OpError
	if errors.As(err, &opErr) {
		return opErr != nil && opErr.Error() == "remote error: tls: handshake failure"
	}
	return false
})

var RemoteHandshakeTimeout = ClassifierFunc(func(err error) bool {
	return err != nil && strings.Contains(err.Error(), "net/http: TLS handshake timeout")
})

var RetriableClassifiers = ClassifierGroup{
	Dial,
	AttemptedTLSWithNonTLSBackend,
	HostnameMismatch,
	RemoteFailedCertCheck,
	RemoteHandshakeFailure,
	RemoteHandshakeTimeout,
	UntrustedCert,
	ExpiredOrNotYetValidCertFailure,
	IdempotentRequestEOF,
	IncompleteRequest,
}

var UntrustedCert = ClassifierFunc(func(err error) bool {
	var tlsCertError *tls.CertificateVerificationError
	switch {
	case errors.As(err, &x509.UnknownAuthorityError{}), errors.As(err, &tlsCertError):
		return true
	default:
		return false
	}
})