mtls

Documentation

Overview

Package mtls provides mTLS and TLS config support.

Index

• Variables
• func NewClientConfig(rootPEM, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)
• func NewServerConfig(rootPEM, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)

Variables

var (
	ErrMissingCertOrKey       = errors.New("root ca set without certificate or key")
	ErrNoValidRootCertificate = errors.New("no valid root certificate")
	ErrMissingCertificate     = errors.New("missing certificate")
	ErrMissingKey             = errors.New("missing key")
)

Functions

func NewClientConfig

func NewClientConfig(rootPEM, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)

NewClientConfig returns a TLS configuration for use with an mTLS or TLS connection. If all parameters are empty, a nil config will be returned.

func NewServerConfig

func NewServerConfig(rootPEM, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)

NewServerConfig returns a TLS configuration for use with an mTLS or TLS connection. If a root CA PEM block is provided the configuration will be set up for mTLS, otherwise if it is empty the config will be for TLS connections. If all parameters are empty, a nil config will be returned.