tlsmanage

Documentation

Index

• Variables
• type Manager
  • func NewManager(cfg ManagerConfig) (*Manager, error)
  • func (m *Manager) Certificate() (tls.Certificate, error)
  • func (m *Manager) FetchFromVault() ([]byte, []byte, error)
  • func (m *Manager) GetCertificateFunc() func(*tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (m *Manager) GetEmail() string
  • func (m *Manager) GetPrivateKey() crypto.PrivateKey
  • func (m *Manager) GetRegistration() *registration.Resource
  • func (m *Manager) HubMaterial(ctx context.Context) ([]byte, []byte, error)
  • func (m *Manager) RefreshFromVault() ([]byte, []byte, error)
  • func (m *Manager) RegisterRenewHandler(L hclog.Logger, reg *workq.Registry)
  • func (m *Manager) SetupHubCert(ctx context.Context) error
  • func (m *Manager) SetupRoute53(sess *session.Session, zoneId string) error
  • func (m *Manager) StoreInVault() error
• type ManagerConfig

Variables

var ErrNoTLSMaterial = errors.New("no tls material available")

var (
	HubCertRenewPeriod = time.Hour * 24 * 30 // every 30 days
)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(cfg ManagerConfig) (*Manager, error)

func (*Manager) Certificate

func (m *Manager) Certificate() (tls.Certificate, error)

func (*Manager) FetchFromVault

func (m *Manager) FetchFromVault() ([]byte, []byte, error)

func (*Manager) GetCertificateFunc

func (m *Manager) GetCertificateFunc() func(*tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificateFunc returns a function that will return the certificate we have stored when a TLS handshake begins. This allows a background process to renew/recreate the LetsEncrypt cert and be picked up without a restart.

func (*Manager) GetEmail

func (m *Manager) GetEmail() string

func (*Manager) GetPrivateKey

func (m *Manager) GetPrivateKey() crypto.PrivateKey

func (*Manager) GetRegistration

func (m *Manager) GetRegistration() *registration.Resource

func (*Manager) HubMaterial

func (m *Manager) HubMaterial(ctx context.Context) ([]byte, []byte, error)

func (*Manager) RefreshFromVault

func (m *Manager) RefreshFromVault() ([]byte, []byte, error)

func (*Manager) RegisterRenewHandler

func (m *Manager) RegisterRenewHandler(L hclog.Logger, reg *workq.Registry)

func (*Manager) SetupHubCert

func (m *Manager) SetupHubCert(ctx context.Context) error

func (*Manager) SetupRoute53

func (m *Manager) SetupRoute53(sess *session.Session, zoneId string) error

func (*Manager) StoreInVault

func (m *Manager) StoreInVault() error

type ManagerConfig

type ManagerConfig struct {
	L           hclog.Logger
	Domain      string
	KeyPath     string
	VaultClient *api.Client
	Staging     bool
}