tls

Documentation

Index

• Variables
• func ParsePrivateKey(data []byte) (crypto.PrivateKey, error)
• func VerifyOnlyCA(caPool *x509.CertPool) func([][]byte, [][]*x509.Certificate) error
• type CertType
• type KeyPair
  • func NewSelfSignedCert(commonName string, certType CertType, keyType KeyType, hosts ...string) (KeyPair, error)
  • func ToKeyPair(key crypto.PrivateKey, cert []byte) (*KeyPair, error)
• type KeyType

Variables

var DefaultKeyType = RSAKeyType

var (
	DefaultValidityPeriod = 10 * 365 * 24 * time.Hour
)

Functions

func ParsePrivateKey

func ParsePrivateKey(data []byte) (crypto.PrivateKey, error)

ParsePrivateKey parses an ASN.1 DER-encoded private key. This is basically what tls.X509KeyPair does internally.

func VerifyOnlyCA

func VerifyOnlyCA(caPool *x509.CertPool) func([][]byte, [][]*x509.Certificate) error

Types

type CertType

type CertType string

const (
	ServerCertType CertType = "server"
	ClientCertType CertType = "client"
)

type KeyPair

type KeyPair struct {
	CertPEM []byte
	KeyPEM  []byte
}

func NewSelfSignedCert

func NewSelfSignedCert(commonName string, certType CertType, keyType KeyType, hosts ...string) (KeyPair, error)

func ToKeyPair

func ToKeyPair(key crypto.PrivateKey, cert []byte) (*KeyPair, error)

type KeyType

type KeyType func() (crypto.Signer, error)

var ECDSAKeyType KeyType = func() (crypto.Signer, error) {
	return ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
}

var RSAKeyType KeyType = func() (crypto.Signer, error) {
	return util_rsa.GenerateKey(util_rsa.DefaultKeySize)
}