https

Documentation

Index

• type Manager
  • func NewLetsencryptManager(email string, hosts []string, cacheFile string) (m Manager, err error)
  • func NewSelfSignManager(certFile, keyFile string) (m Manager, err error)

Types

type Manager

type Manager interface {
	GetCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)
}

The https manager which provides the certificate.

func NewLetsencryptManager

func NewLetsencryptManager(email string, hosts []string, cacheFile string) (m Manager, err error)

Register the email to letsencrypt, cache the certs in cacheFile, set allow hosts. @remark set hosts to empty string when allow all request hosts, but maybe attack. @remark set email to nil to not regiester, use empty email to request cert from letsencrypt. @remark set cacheFile to empty string to not cache the info and certs. @remark we only use tls validate, https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-acme-acme.md#tls-with-server-name-indication-tls-sni

so the https port must be 443, we cannot serve at other ports.

func NewSelfSignManager

func NewSelfSignManager(certFile, keyFile string) (m Manager, err error)