certclient

Documentation

Index

• func NewClientTLS(options ...TLSOption) (*tls.Config, error)
• func NewClientTLSConfig(container appext.NameContainer, ...) (*tls.Config, error)
• type ExternalClientTLSConfig
  • func (e ExternalClientTLSConfig) IsEmpty() bool
• type TLSOption
  • func WithRootCertFilePaths(rootCertFilePaths ...string) TLSOption
  • func WithSystemCertPool() TLSOption

Functions

func NewClientTLS

func NewClientTLS(options ...TLSOption) (*tls.Config, error)

NewClientTLScreates a new tls.Config from a root certificate files.

func NewClientTLSConfig

func NewClientTLSConfig(
	container appext.NameContainer,
	externalClientTLSConfig ExternalClientTLSConfig,
) (*tls.Config, error)

NewClientTLSConfig creates a new *tls.Config from the ExternalTLSConfig

The default is to use the system TLS config.

Types

type ExternalClientTLSConfig

type ExternalClientTLSConfig struct {
	Use               string   `json:"use,omitempty" yaml:"use,omitempty"`
	RootCertFilePaths []string `json:"root_cert_file_paths,omitempty" yaml:"root_cert_file_paths,omitempty"`
}

ExternalClientTLSConfig allows users to configure TLS on the client side.

func (ExternalClientTLSConfig) IsEmpty

func (e ExternalClientTLSConfig) IsEmpty() bool

IsEmpty returns true if the ExternalClientTLSConfig is empty.

type TLSOption

type TLSOption func(*tlsOptions)

TLSOption is an option for a new TLS Config.

func WithRootCertFilePaths

func WithRootCertFilePaths(rootCertFilePaths ...string) TLSOption

WithRootCertFilePaths returns a new TLSOption to trust the specified root CAs at the given paths.

func WithSystemCertPool

func WithSystemCertPool() TLSOption

WithSystemCertPool returns a new TLSOption to use the system certificates. By default, no system certificates are used.