ftls

Documentation

Overview

Package ftls provides simpler/default ways to use TLS, including Mutual TLS, with CFS.

Index

• Variables
• func NewGRPCClientDialOpt(c *Config) (grpc.DialOption, error)
• func NewServerTLSConfig(c *Config) (*tls.Config, error)
• type Config
  • func DefaultClientFTLSConf(CertFile, KeyFile, CAFile string) *Config
  • func DefaultServerFTLSConf(CertFile, KeyFile, CAFile string) *Config

Variables

var DefaultMinVersion = uint16(tls.VersionTLS12)

Functions

func NewGRPCClientDialOpt

func NewGRPCClientDialOpt(c *Config) (grpc.DialOption, error)

NewGRPCClientDialOpt provides a GRPC option for TLS configuration using the provided ftls Config.

func NewServerTLSConfig

func NewServerTLSConfig(c *Config) (*tls.Config, error)

NewServerTLSConfig constructs a server tls.Conf from the provided ftls Config.

Types

type Config

type Config struct {
	StrictClientVerify bool
	MutualTLS          bool
	InsecureSkipVerify bool
	MinVersion         uint16
	CipherSet          []uint16
	CertFile           string
	KeyFile            string
	CAFile             string
}

func DefaultClientFTLSConf

func DefaultClientFTLSConf(CertFile, KeyFile, CAFile string) *Config

DefaultClientFTLSConf returns a ftls config with the most commonly used client config set.

func DefaultServerFTLSConf

func DefaultServerFTLSConf(CertFile, KeyFile, CAFile string) *Config

DefaultServerFTLSConf returns a ftls config with the most commonly used server config set.