mtls

Aug 4, 2023

Changes in this version

+ func ClientConfig(caCert, cert, key io.Reader) (*tls.Config, error)

+ func GenerateCA(cn string, validity time.Time, keyAlg KeyAlg) ([]byte, []byte, error)

+ func GenerateClientConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, ...) (*tls.Config, error)

+ func GenerateClientConfigFromFile(caCertFile, caKeyFile string, validity time.Time, ...) (*tls.Config, error)

+ func GenerateKeyPair(cfg *CertRequestConfig) ([]byte, []byte, error)

+ func GenerateServerConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, ...) (*tls.Config, error)

+ func GenerateServerConfigFromFile(caCertFile, caKeyFile string, validity time.Time, ...) (*tls.Config, error)

+ func LoadCACertificate(caCert, caKey io.Reader) (tls.Certificate, error)

+ func MarshalCAPEM(cp *CAPEM) ([]byte, error)

+ func ServerConfig(caCert, cert, key io.Reader) (*tls.Config, error)

+ type CAPEM struct

+ Cert []byte

+ Key []byte

+ func UnmarshalCAPEM(b []byte) (*CAPEM, error)

+ type CertRequestConfig struct

+ CA *tls.Certificate

+ CN string

+ DNS []string

+ IP []net.IP

+ KeyAlg KeyAlg

+ Validity time.Time

+ type CertRequestOption func(crc *CertRequestConfig)

+ func WithCertRequestHostnames(hostnames ...string) CertRequestOption

+ func WithCertRequestIPs(ips ...net.IP) CertRequestOption

+ type KeyAlg uint8

+ const ECDSAKey

+ const RSAKey