general

Documentation

Index

• type CertManager
  • func New(config Config, fileWatcher *fsnotify.Watcher, logger log.Logger) (*CertManager, error)
  • func (a *CertManager) Close()
  • func (a *CertManager) GetCertificateAuthorities() *x509.CertPool
  • func (a *CertManager) GetClientTLSConfig() *tls.Config
  • func (a *CertManager) GetServerTLSConfig() *tls.Config
• type Config
  • func (c Config) Validate() error

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

CertManager holds certificates from filesystem watched for changes

func New

func New(config Config, fileWatcher *fsnotify.Watcher, logger log.Logger) (*CertManager, error)

New creates a new certificate manager which watches for certs in a filesystem

func (*CertManager) Close

func (a *CertManager) Close()

Close ends watching certificates

func (*CertManager) GetCertificateAuthorities

func (a *CertManager) GetCertificateAuthorities() *x509.CertPool

GetCertificateAuthorities returns certificates authorities

func (*CertManager) GetClientTLSConfig

func (a *CertManager) GetClientTLSConfig() *tls.Config

GetClientTLSConfig returns tls configuration for clients

func (*CertManager) GetServerTLSConfig

func (a *CertManager) GetServerTLSConfig() *tls.Config

GetServerTLSConfig returns tls configuration for servers

type Config

type Config struct {
	CAPool                    []urischeme.URIScheme `yaml:"caPool" json:"caPool" description:"file path to the root certificates in PEM format"`
	KeyFile                   urischeme.URIScheme   `yaml:"keyFile" json:"keyFile" description:"file name of private key in PEM format"`
	CertFile                  urischeme.URIScheme   `yaml:"certFile" json:"certFile" description:"file name of certificate in PEM format"`
	ClientCertificateRequired bool                  `yaml:"clientCertificateRequired" json:"clientCertificateRequired" description:"require client certificate"`
	UseSystemCAPool           bool                  `yaml:"useSystemCAPool" json:"useSystemCaPool" description:"use system certification pool"`
}

Config provides configuration of a file based Server Certificate manager

func (Config) Validate

func (c Config) Validate() error