tls

Documentation

Index

• func BreakIntoNextProtos(prefix, value string) ([]string, error)
• func ClientConfig(ctx context.Context, n *types.NodeCredentials, opt ...nodeenrollment.Option) (*tls.Config, error)
• func CombineFromNextProtos(prefix string, chunks []string) (string, error)
• func GenerateServerCertificates(ctx context.Context, storage nodeenrollment.Storage, ...) (*types.GenerateServerCertificatesResponse, error)
• func ServerConfig(ctx context.Context, in *types.GenerateServerCertificatesResponse, ...) (*tls.Config, error)

Functions

func BreakIntoNextProtos

func BreakIntoNextProtos(prefix, value string) ([]string, error)

BreakIntoNextProtos takes in a prefix and a value and breaks it into a chunks

func ClientConfig

func ClientConfig(ctx context.Context, n *types.NodeCredentials, opt ...nodeenrollment.Option) (*tls.Config, error)

ClientConfig creates a client-side tls.Config by from the given NodeCredentials. The values populated here can be used or modified as needed.

Supported options: WithRandomReader, WithServerName (passed through to standardTlsConfig), WithExtraAlpnProtos

func CombineFromNextProtos

func CombineFromNextProtos(prefix string, chunks []string) (string, error)

CombineFromNextProtos takes in a prefix and chunks and combines it from chunks

func GenerateServerCertificates

func GenerateServerCertificates(
	ctx context.Context,
	storage nodeenrollment.Storage,
	req *types.GenerateServerCertificatesRequest,
	opt ...nodeenrollment.Option,
) (*types.GenerateServerCertificatesResponse, error)

GenerateServerCertificates issues contemporaneous certificates for TLS connections from one or more root certificates.

Valid options: WithRandomReader, WithWrapper (passed through to LoadNodeInformation and LoadRootCertificates)

func ServerConfig

func ServerConfig(
	ctx context.Context,
	in *types.GenerateServerCertificatesResponse,
	opt ...nodeenrollment.Option,
) (*tls.Config, error)

ServerConfig takes in a generate response and turns it into a server-side TLS configuration

Supported options: none, although options passed in here will be passed through to the standard TLS configuration function (useful for tests, mainly)