tlscfg

Documentation

Index

• func CipherSuiteNamesToIDs(cipherNames []string) ([]uint16, error)
• func VersionNameToID(versionName string) (uint16, error)
• type ClientFlagsConfig
  • func (c ClientFlagsConfig) AddFlags(flags *flag.FlagSet)
  • func (c ClientFlagsConfig) InitFromViper(v *viper.Viper) (Options, error)
• type Options
  • func (p *Options) Close() error
  • func (p *Options) Config(logger *zap.Logger) (*tls.Config, error)
• type ServerFlagsConfig
  • func (c ServerFlagsConfig) AddFlags(flags *flag.FlagSet)
  • func (c ServerFlagsConfig) InitFromViper(v *viper.Viper) (Options, error)

Functions

func CipherSuiteNamesToIDs

func CipherSuiteNamesToIDs(cipherNames []string) ([]uint16, error)

CipherSuiteNamesToIDs returns a list of cipher suite IDs from the cipher suite names passed.

func VersionNameToID

func VersionNameToID(versionName string) (uint16, error)

VersionNameToID returns the version ID from version name

Types

type ClientFlagsConfig

type ClientFlagsConfig struct {
	Prefix string
}

ClientFlagsConfig describes which CLI flags for TLS client should be generated.

func (ClientFlagsConfig) AddFlags

func (c ClientFlagsConfig) AddFlags(flags *flag.FlagSet)

AddFlags adds flags for TLS to the FlagSet.

func (ClientFlagsConfig) InitFromViper

func (c ClientFlagsConfig) InitFromViper(v *viper.Viper) (Options, error)

InitFromViper creates tls.Config populated with values retrieved from Viper.

type Options

type Options struct {
	Enabled        bool     `mapstructure:"enabled"`
	CAPath         string   `mapstructure:"ca"`
	CertPath       string   `mapstructure:"cert"`
	KeyPath        string   `mapstructure:"key"`
	ServerName     string   `mapstructure:"server_name"` // only for client-side TLS config
	ClientCAPath   string   `mapstructure:"client_ca"`   // only for server-side TLS config for client auth
	CipherSuites   []string `mapstructure:"cipher_suites"`
	MinVersion     string   `mapstructure:"min_version"`
	MaxVersion     string   `mapstructure:"max_version"`
	SkipHostVerify bool     `mapstructure:"skip_host_verify"`
	// contains filtered or unexported fields
}

Options describes the configuration properties for TLS Connections.

func (*Options) Close

func (p *Options) Close() error

Close shuts down the embedded certificate watcher.

func (*Options) Config

func (p *Options) Config(logger *zap.Logger) (*tls.Config, error)

Config loads TLS certificates and returns a TLS Config.

type ServerFlagsConfig

type ServerFlagsConfig struct {
	Prefix string
}

ServerFlagsConfig describes which CLI flags for TLS server should be generated.

func (ServerFlagsConfig) AddFlags

func (c ServerFlagsConfig) AddFlags(flags *flag.FlagSet)

AddFlags adds flags for TLS to the FlagSet.

func (ServerFlagsConfig) InitFromViper

func (c ServerFlagsConfig) InitFromViper(v *viper.Viper) (Options, error)

InitFromViper creates tls.Config populated with values retrieved from Viper.