tls

Documentation

Index

• func AbsTLSClient(cfg *ClientTLSConfig, configDir string) error
• func GetClientTLSConfig(cfg *ClientTLSConfig) (*tls.Config, error)
• type ClientTLSConfig
• type KeyCertFiles
• type ServerTLSConfig

Functions

func AbsTLSClient

func AbsTLSClient(cfg *ClientTLSConfig, configDir string) error

AbsTLSClient makes TLS client files absolute

func GetClientTLSConfig

func GetClientTLSConfig(cfg *ClientTLSConfig) (*tls.Config, error)

GetClientTLSConfig creates a tls.Config object from certs and roots

Types

type ClientTLSConfig

type ClientTLSConfig struct {
	Enabled       bool   `help:"Enable TLS for client connection"`
	CertFiles     string `help:"PEM-encoded comma separated list of trusted certificate files (e.g. root1.pem, root2.pem)"`
	CertFilesList []string
	Client        KeyCertFiles
}

ClientTLSConfig defines the key material for a TLS client

type KeyCertFiles

type KeyCertFiles struct {
	KeyFile  string `help:"PEM-encoded key file when mutual authentication is enabled"`
	CertFile string `help:"PEM-encoded certificate file when mutual authenticate is enabled"`
}

KeyCertFiles defines the files need for client on TLS

type ServerTLSConfig

type ServerTLSConfig struct {
	Enabled  bool   `help:"Enable TLS on the listening port"`
	CertFile string `def:"ca-cert.pem" help:"PEM-encoded TLS certificate file for server's listening port"`
	KeyFile  string `def:"ca-key.pem" help:"PEM-encoded TLS key for server's listening port"`
}

ServerTLSConfig defines key material for a TLS server