ssl_util

Documentation

Index

• Variables
• func AppendKubernetesCertsToPool(pool *x509.CertPool) error
• func CertExpiry(host, port, days string, overrideTLS bool) (bool, bool, error)
• func CreatePool() (*x509.CertPool, error)
• func FetchKubernetesSelfSignedCertFromDisk() ([]byte, error)
• func KubernetesCAPresent() bool
• func SSLHandshake(siteURL *url.URL) error
• func SSLHandshakeWithCertPool(url *url.URL, certPool *x509.CertPool) error
• func SelfSignedCAPresent() bool

Variables

var TimeoutSeconds = 10

Functions

func AppendKubernetesCertsToPool

func AppendKubernetesCertsToPool(pool *x509.CertPool) error

AppendKubernetesCertsToPool appends the kubernetes certificates on disk (in the pod) to the supplied cert pool.

func CertExpiry

func CertExpiry(host, port, days string, overrideTLS bool) (bool, bool, error)

CertExpiry returns bool values indicating if the cert on a given host and port are currently exiring or if the expiration is the specified number of days away, and any errors

func CreatePool

func CreatePool() (*x509.CertPool, error)

CreatePool creates a cert pool depending on if a Kubernetes CA is found or a custom CA cert is mounted at /etc/ssl/selfsign/certificate.crt

func FetchKubernetesSelfSignedCertFromDisk

func FetchKubernetesSelfSignedCertFromDisk() ([]byte, error)

FetchKubernetesSelfSignedCertFromDisk fetches the kubernetes self-signed cert placed on disk within pods as an *x509.Certificate.

func KubernetesCAPresent

func KubernetesCAPresent() bool

kubernetesCAPresent returns 'true' if the included Kubernetes CA is available

func SSLHandshake

func SSLHandshake(siteURL *url.URL) error

SSLHandshake does an https handshake and returns any errors encountered

func SSLHandshakeWithCertPool

func SSLHandshakeWithCertPool(url *url.URL, certPool *x509.CertPool) error

SSLHandshakeWithCertPool does an SSL handshake with the spciefied cert pool instead of the default system certificate pool

func SelfSignedCAPresent

func SelfSignedCAPresent() bool

SelfSignedCAPresent determines if the user has uploaded a custom CA to use for certificate validation