ftls

README

ftls

Documentation

Index

• Variables
• func NewClientTLSConfig(c *Config) (*tls.Config, error)
• func NewGRPCClientDialOpt(c *Config) (grpc.DialOption, error)
• func NewServerTLSConfig(c *Config) (*tls.Config, error)
• func VerifyClientAddrMatch(c *tls.Conn) error
• type Config
  • func DefaultClientFTLSConf(CertFile, KeyFile, CAFile string) *Config
  • func DefaultServerFTLSConf(CertFile, KeyFile, CAFile string) *Config
• type Ftsl

Variables

var (
	DefaultMinVersion = uint16(tls.VersionTLS12)
	DefaultCipherSet  = []uint16{tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384}
)

Functions

func NewClientTLSConfig

func NewClientTLSConfig(c *Config) (*tls.Config, error)

NewClientTLSConfig constructs a client tls.Conf from provide ftls Config.

func NewGRPCClientDialOpt

func NewGRPCClientDialOpt(c *Config) (grpc.DialOption, error)

func NewServerTLSConfig

func NewServerTLSConfig(c *Config) (*tls.Config, error)

NewServerTLSConfig constructs a server tls.Conf from the provided ftls Config.

func VerifyClientAddrMatch

func VerifyClientAddrMatch(c *tls.Conn) error

Types

type Config

type Config struct {
	StrictClientVerify bool
	MutualTLS          bool
	InsecureSkipVerify bool
	MinVersion         uint16
	CipherSet          []uint16
	CertFile           string
	KeyFile            string
	CAFile             string
}

func DefaultClientFTLSConf

func DefaultClientFTLSConf(CertFile, KeyFile, CAFile string) *Config

DefaultClientFTLSConf returns a ftls config with the most commonly used config set.

func DefaultServerFTLSConf

func DefaultServerFTLSConf(CertFile, KeyFile, CAFile string) *Config

DefaultServerFTLSConf returns a ftls config with the most commonly used config set.

type Ftsl

type Ftsl struct {
	// contains filtered or unexported fields
}