tls

Documentation

Index

• Constants
• func NewTLSConfig(fipsMode bool) *tls.Config

Constants

const BuiltWithBoringCrypto = false

BuiltWithBoringCrypto if true, strict fips mode is enforced.

Functions

func NewTLSConfig

func NewTLSConfig(fipsMode bool) *tls.Config

NewTLSConfig returns a tls.Config with the recommended default settings for Calico Enterprise components. Read more recommendations here in Chapter 3: https://www.gsa.gov/cdnstatic/SSL_TLS_Implementation_%5BCIO_IT_Security_14-69_Rev_6%5D_04-06-2021docx.pdf When built with GOEXPERIMENT and tag boringcrypto, the TLS settings in the config will automatically be overwritten and set to strict mode, due to the fipsonly import in fipstls.go.