cacert

Documentation

Overview

Package cacert provides code to import CA certificate bundles. It is configured by CLI flags and environment variables.

Index

• Constants
• func Import(c *cli.Context, opts ImportOptions) error
• func IsUBIImage() bool
• func NewFlags() []cli.Flag
• type ImportOptions

Constants

const (
	// EnvVarBundleContent is the env var for the CA bundle to import
	EnvVarBundleContent = "ADDITIONAL_CA_CERT_BUNDLE"

	// FlagBundleContent is the CLI flag for the CA bundle to import
	FlagBundleContent = "additional-ca-cert-bundle"

	// DefaultBundlePath is the default import path of the CA bundle
	DefaultBundlePath = "/etc/ssl/certs/ca-certificates.crt"

	// DefaultUBIBundlePath is the default import path of the CA bundle for UBI based images
	DefaultUBIBundlePath = "/etc/pki/ca-trust/source/anchors/ca-certificates.crt"
)

Functions

func Import

func Import(c *cli.Context, opts ImportOptions) error

Import writes the CA bundle to its import path. This is a no-op if the CA bundle is empty.

func IsUBIImage

func IsUBIImage() bool

IsUBIImage returns true if the current OS is a RHEL-based image

func NewFlags

func NewFlags() []cli.Flag

NewFlags returns CLI flags to configure the import of a CA bundle.

Types

type ImportOptions

type ImportOptions struct {
	Path string // Path specifies where to write the additional CA cert bundle.
}

ImportOptions provides a way to specify optional arguments for the Import function.