tls

Documentation

Index

• type TLSConfigLoader
  • func NewTLSConfigLoader() (*TLSConfigLoader, error)
  • func (t *TLSConfigLoader) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (t *TLSConfigLoader) GetClientCAs() *x509.CertPool
  • func (t *TLSConfigLoader) GetClientCertificate(*tls.CertificateRequestInfo) (*tls.Certificate, error)
  • func (t *TLSConfigLoader) GetClientTLSConfig() *tls.Config
  • func (t *TLSConfigLoader) GetRootCAs() *x509.CertPool
  • func (t *TLSConfigLoader) GetServerTLSConfig(clientAuthType tls.ClientAuthType) *tls.Config
  • func (t *TLSConfigLoader) SetClientCACertificate(caCertificateFile string) error
  • func (t *TLSConfigLoader) SetClientCertificate(certificateFile, keyFile string) error
  • func (t *TLSConfigLoader) SetServerCACertificate(caCertificateFile string) error
  • func (t *TLSConfigLoader) SetServerCertificate(certificateFile, keyFile string) error
  • func (t *TLSConfigLoader) Stop()
  • func (t *TLSConfigLoader) Watch() error
• type TestEnv
  • func NewTestEnv(testEnv *test.TestEnv) (*TestEnv, error)
  • func (t *TestEnv) CreateCACertificate() error
  • func (t *TestEnv) CreateCertificate() error
  • func (env *TestEnv) Shutdown() error

Types

type TLSConfigLoader

type TLSConfigLoader struct {
	// contains filtered or unexported fields
}

func NewTLSConfigLoader

func NewTLSConfigLoader() (*TLSConfigLoader, error)

func (*TLSConfigLoader) GetCertificate

func (t *TLSConfigLoader) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate returns the loaded certificate for use by the TLSConfig fields GetCertificate field in a http.Server.

func (*TLSConfigLoader) GetClientCAs

func (t *TLSConfigLoader) GetClientCAs() *x509.CertPool

GetClientCAs returns the cert pool to use to verify client certificates.

func (*TLSConfigLoader) GetClientCertificate

func (t *TLSConfigLoader) GetClientCertificate(*tls.CertificateRequestInfo) (*tls.Certificate, error)

GetClientCertificate returns the loaded certificate for use by the TLSConfig fields GetClientCertificate field in a http.Server.

func (*TLSConfigLoader) GetClientTLSConfig

func (t *TLSConfigLoader) GetClientTLSConfig() *tls.Config

GetTLSConfig returns a tls.Config with auto reloading certs.

func (*TLSConfigLoader) GetRootCAs

func (t *TLSConfigLoader) GetRootCAs() *x509.CertPool

GetRootCAs returns the cert pool to use to verify certificates.

func (*TLSConfigLoader) GetServerTLSConfig

func (t *TLSConfigLoader) GetServerTLSConfig(clientAuthType tls.ClientAuthType) *tls.Config

func (*TLSConfigLoader) SetClientCACertificate

func (t *TLSConfigLoader) SetClientCACertificate(caCertificateFile string) error

func (*TLSConfigLoader) SetClientCertificate

func (t *TLSConfigLoader) SetClientCertificate(certificateFile, keyFile string) error

func (*TLSConfigLoader) SetServerCACertificate

func (t *TLSConfigLoader) SetServerCACertificate(caCertificateFile string) error

func (*TLSConfigLoader) SetServerCertificate

func (t *TLSConfigLoader) SetServerCertificate(certificateFile, keyFile string) error

func (*TLSConfigLoader) Stop

func (t *TLSConfigLoader) Stop()

Stop stops watching for changes to the certificate and key files.

func (*TLSConfigLoader) Watch

func (t *TLSConfigLoader) Watch() error

On any change the certificate and key are reloaded. If there is an issue the load will fail and the old (if any) certificates and keys will continue to be used.

type TestEnv

type TestEnv struct {
	*test.TestEnv
	// contains filtered or unexported fields
}

func NewTestEnv

func NewTestEnv(testEnv *test.TestEnv) (*TestEnv, error)

func (*TestEnv) CreateCACertificate

func (t *TestEnv) CreateCACertificate() error

func (*TestEnv) CreateCertificate

func (t *TestEnv) CreateCertificate() error

func (*TestEnv) Shutdown

func (env *TestEnv) Shutdown() error