file

Documentation

Index

• type CertManager
  • func NewCertManagerFromConfiguration(config Config) (*CertManager, error)
  • func (a *CertManager) Close()
  • func (a *CertManager) GetCertificateAuthorities() []*x509.Certificate
  • func (a *CertManager) GetClientTLSConfig() *tls.Config
  • func (a *CertManager) GetServerTLSConfig() *tls.Config
• type Config

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

CertManager holds certificates from filesystem watched for changes

func NewCertManagerFromConfiguration

func NewCertManagerFromConfiguration(config Config) (*CertManager, error)

NewCertManagerFromConfiguration creates a new certificate manager which watches for certs in a filesystem

func (*CertManager) Close

func (a *CertManager) Close()

Close ends watching certificates

func (*CertManager) GetCertificateAuthorities

func (a *CertManager) GetCertificateAuthorities() []*x509.Certificate

GetCertificateAuthorities returns certificates authorities

func (*CertManager) GetClientTLSConfig

func (a *CertManager) GetClientTLSConfig() *tls.Config

GetClientTLSConfig returns tls configuration for clients

func (*CertManager) GetServerTLSConfig

func (a *CertManager) GetServerTLSConfig() *tls.Config

GetServerTLSConfig returns tls configuration for servers

type Config

type Config struct {
	CAPool                         string `envconfig:"CA_POOL" long:"tls-file_ca-pool" description:"file path to the root certificate in PEM format"`
	TLSKeyFileName                 string `envconfig:"CERT_KEY_NAME" long:"tls-file-cert-key-name" description:"file name of private key in PEM format"`
	DirPath                        string `envconfig:"CERT_DIR_PATH" long:"tls-file-cert-dir-path" description:"dir path where cert/key pair are saved"`
	TLSCertFileName                string `envconfig:"CERT_NAME" long:"tls-file-cert-name" description:"file name of certificate in PEM format"`
	DisableVerifyClientCertificate bool   `` /* 175-byte string literal not displayed */
	UseSystemCertPool              bool   `` /* 158-byte string literal not displayed */
}

Config provides configuration of a file based Certificate manager