creds

Documentation

Index

• Variables
• func NewClientCredentials(rootCAs *x509.CertPool, clientCerts []tls.Certificate) credentials.TransportCredentials
• func NewServerCredentials(serverConfig *tls.Config, acceptedSANs map[string]struct{}) (credentials.TransportCredentials, error)
• type SANNotAcceptedErr
  • func (e SANNotAcceptedErr) Error() string

Variables

var (
	ClientHandshakeNopErr = errors.New(
		"boulder/grpc/creds: Client-side handshakes are not implemented with " +
			"serverTransportCredentials")
	ServerHandshakeNopErr = errors.New(
		"boulder/grpc/creds: Server-side handshakes are not implemented with " +
			"clientTransportCredentials")
	OverrideServerNameNopErr = errors.New(
		"boulder/grpc/creds: OverrideServerName() is not implemented")
	NilServerConfigErr = errors.New(
		"boulder/grpc/creds: `serverConfig` must not be nil")
	EmptyPeerCertsErr = errors.New(
		"boulder/grpc/creds: validateClient given state with empty PeerCertificates")
)

Functions

func NewClientCredentials

func NewClientCredentials(rootCAs *x509.CertPool, clientCerts []tls.Certificate) credentials.TransportCredentials

NewClientCredentials returns a new initialized grpc/credentials.TransportCredentials for client usage

func NewServerCredentials

func NewServerCredentials(serverConfig *tls.Config, acceptedSANs map[string]struct{}) (credentials.TransportCredentials, error)

NewServerCredentials returns a new initialized grpc/credentials.TransportCredentials for server usage

Types

type SANNotAcceptedErr

type SANNotAcceptedErr struct {
	// contains filtered or unexported fields
}

func (SANNotAcceptedErr) Error

func (e SANNotAcceptedErr) Error() string