certmanager

Documentation

Overview

Package certmanager implements an X509 certificate manager that can replace https://pkg.go.dev/golang.org/x/crypto/acme/autocert#Manager for testing purposes. This certificate manager is a self-signed certificate authority that is not and should not be trusted for securing any real life communication.

Index

• type CertManager
  • func New(name string, logger func(string, ...interface{})) (*CertManager, error)
  • func (cm *CertManager) GetCert(name string) (*tls.Certificate, error)
  • func (cm *CertManager) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (cm *CertManager) HTTPHandler(fallback http.Handler) http.Handler
  • func (cm *CertManager) RootCACertPool() *x509.CertPool
  • func (cm *CertManager) RootCAPEM() string
  • func (cm *CertManager) TLSConfig() *tls.Config

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

CertManager is an X509 certificate manager that also acts as a certificate authority for testing purposes.

func New

func New(name string, logger func(string, ...interface{})) (*CertManager, error)

New returns a new ephemeral certificate manager.

func (*CertManager) GetCert

func (cm *CertManager) GetCert(name string) (*tls.Certificate, error)

GetCert returns a new tls.Certificate with name as the subject's common name.

func (*CertManager) GetCertificate

func (cm *CertManager) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate can be used in tls.Config.

func (*CertManager) HTTPHandler

func (cm *CertManager) HTTPHandler(fallback http.Handler) http.Handler

HTTPHandler returns its fallback arguments. It exists only to mimic the autocert API.

func (*CertManager) RootCACertPool

func (cm *CertManager) RootCACertPool() *x509.CertPool

RootCACertPool returns a CertPool that contains the root certificate.

func (*CertManager) RootCAPEM

func (cm *CertManager) RootCAPEM() string

RootCAPEM returns the root certificate in PEM format.

func (*CertManager) TLSConfig

func (cm *CertManager) TLSConfig() *tls.Config

TLSConfig returns a tls.Config that uses this certificate manager.