tlsutil

Documentation

Index

• Variables
• func NewCertificate(certFile, keyFile string, commonName string, lifetimeDays int) (tls.Certificate, error)
• func NewCertificateInMemory(commonName string, lifetimeDays int) (tls.Certificate, error)
• func SecureDefaultTLS13() *tls.Config
• func SecureDefaultWithTLS12() *tls.Config
• type DowngradingListener
  • func (l *DowngradingListener) Accept() (net.Conn, error)
  • func (l *DowngradingListener) AcceptNoWrapTLS() (net.Conn, bool, error)
• type UnionedConnection
  • func (c *UnionedConnection) Read(b []byte) (n int, err error)

Variables

var (
	ErrIdentificationFailed = errors.New("failed to identify socket type")
)

Functions

func NewCertificate

func NewCertificate(certFile, keyFile string, commonName string, lifetimeDays int) (tls.Certificate, error)

NewCertificate generates and returns a new TLS certificate, saved to the given PEM files.

func NewCertificateInMemory

func NewCertificateInMemory(commonName string, lifetimeDays int) (tls.Certificate, error)

NewCertificateInMemory generates and returns a new TLS certificate, kept only in memory.

func SecureDefaultTLS13

func SecureDefaultTLS13() *tls.Config

SecureDefault returns a tls.Config with reasonable, secure defaults set. This variant allows only TLS 1.3.

func SecureDefaultWithTLS12

func SecureDefaultWithTLS12() *tls.Config

SecureDefaultWithTLS12 returns a tls.Config with reasonable, secure defaults set. This variant allows TLS 1.2.

Types

type DowngradingListener

type DowngradingListener struct {
	net.Listener
	TLSConfig *tls.Config
}

func (*DowngradingListener) Accept

func (l *DowngradingListener) Accept() (net.Conn, error)

func (*DowngradingListener) AcceptNoWrapTLS

func (l *DowngradingListener) AcceptNoWrapTLS() (net.Conn, bool, error)

type UnionedConnection

type UnionedConnection struct {
	net.Conn
	// contains filtered or unexported fields
}

func (*UnionedConnection) Read

func (c *UnionedConnection) Read(b []byte) (n int, err error)