certmanager

Documentation

Index

• Variables
• type Alerter
• type AlertingConfig
  • func NewAlertingConfig(cfg *config.Config) AlertingConfig
• type CertCache
• type CertManager
  • func NewCertManager(domains []string, certDir string, cache CertCache, ctx context.Context, ...) (*CertManager, error)
  • func (cm *CertManager) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (cm *CertManager) Stop()
• type EmailAlerter
  • func NewEmailAlerter(cfg AlertingConfig, logger *zap.Logger) (*EmailAlerter, error)
  • func (e *EmailAlerter) Alert(domain string, expiry time.Time) error
• type InMemoryCertCache
  • func NewInMemoryCertCache() *InMemoryCertCache
  • func (c *InMemoryCertCache) Delete(ctx context.Context, key string) error
  • func (c *InMemoryCertCache) Get(ctx context.Context, key string) ([]byte, error)
  • func (c *InMemoryCertCache) Put(ctx context.Context, key string, data []byte) error
• type NoopAlerter
  • func (n *NoopAlerter) Alert(domain string, expiry time.Time) error

Variables

var TerrasterCiphers = []uint16{

	tls.TLS_AES_256_GCM_SHA384,
	tls.TLS_AES_128_GCM_SHA256,
	tls.TLS_CHACHA20_POLY1305_SHA256,

	tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
	tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
	tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,

	tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
	tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
	tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,

	tls.TLS_FALLBACK_SCSV,
}

default ciphers for terraster

Types

type Alerter

type Alerter interface {
	Alert(domain string, expiry time.Time) error
}

Alerter defines the interface for certificate expiration alerting

type AlertingConfig

type AlertingConfig struct {
	Enabled   bool
	SMTPHost  string
	SMTPPort  int
	FromEmail string
	FromPass  string
	ToEmails  []string
}

func NewAlertingConfig

func NewAlertingConfig(cfg *config.Config) AlertingConfig

type CertCache

type CertCache interface {
	Get(ctx context.Context, key string) ([]byte, error)
	Put(ctx context.Context, key string, data []byte) error
	Delete(ctx context.Context, key string) error
}

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

func NewCertManager

func NewCertManager(
	domains []string,
	certDir string,
	cache CertCache,
	ctx context.Context,
	cfg *config.Config,
	alerting AlertingConfig,
	logger *zap.Logger,
) (*CertManager, error)

func (*CertManager) GetCertificate

func (cm *CertManager) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate retrieves the TLS certificate for the given client hello.

func (*CertManager) Stop

func (cm *CertManager) Stop()

type EmailAlerter

type EmailAlerter struct {
	// contains filtered or unexported fields
}

func NewEmailAlerter

func NewEmailAlerter(cfg AlertingConfig, logger *zap.Logger) (*EmailAlerter, error)

func (*EmailAlerter) Alert

func (e *EmailAlerter) Alert(domain string, expiry time.Time) error

type InMemoryCertCache

type InMemoryCertCache struct {
	// contains filtered or unexported fields
}

func NewInMemoryCertCache

func NewInMemoryCertCache() *InMemoryCertCache

func (*InMemoryCertCache) Delete

func (c *InMemoryCertCache) Delete(ctx context.Context, key string) error

func (*InMemoryCertCache) Get

func (c *InMemoryCertCache) Get(ctx context.Context, key string) ([]byte, error)

func (*InMemoryCertCache) Put

func (c *InMemoryCertCache) Put(ctx context.Context, key string, data []byte) error

type NoopAlerter

type NoopAlerter struct{}

NoopAlerter implements Alerter but does nothing

func (*NoopAlerter) Alert

func (n *NoopAlerter) Alert(domain string, expiry time.Time) error