quicutil

README

quicutil

quicutil is a simple package that provides convenience functions that generate self-signed certificates for QUIC connections that don't require PKI, such as trusted connections over a local network, or connections where a different verification mechanism is used.

Connections and servers created by this package are encrypted but not secure. They may be vulnerable to MitM attacks if a separate verification mechanism isn't used.

Do not use this in production for applications where PKI is needed, such as for public websites!

Documentation

Overview

Package quicutil provides convenience functions that generate self-signed certificates for QUIC connections that don't require PKI, such as trusted connections over a local network, or connections where a different verification mechanism is used.

Do not use this for applications where PKI is needed, such as for public websites!

Index

• func DialAddrInsecure(ctx context.Context, addr string, config *quic.Config) (quic.Connection, error)
• func DialInsecure(ctx context.Context, conn net.PacketConn, addr net.Addr, config *quic.Config) (quic.Connection, error)
• func GenerateSelfSignedCert() (*tls.Config, error)
• func ListenAddrInsecure(addr string, config *quic.Config) (*quic.Listener, error)
• func ListenInsecure(conn net.PacketConn, config *quic.Config) (*quic.Listener, error)

Functions

func DialAddrInsecure

func DialAddrInsecure(ctx context.Context, addr string, config *quic.Config) (quic.Connection, error)

DialAddrInsecure establishes a new insecure QUIC connection to a server.

func DialInsecure

func DialInsecure(ctx context.Context, conn net.PacketConn, addr net.Addr, config *quic.Config) (quic.Connection, error)

DialInsecure establishes a new insecure QUIC connection to a server using a net.PacketConn.

func GenerateSelfSignedCert

func GenerateSelfSignedCert() (*tls.Config, error)

GenerateSelfSignedCert generates a new self-signed Ed25519 TLS certificate.

func ListenAddrInsecure

func ListenAddrInsecure(addr string, config *quic.Config) (*quic.Listener, error)

ListenAddrInsecure generates a new self-signed certificate and then listens for QUIC connections on a given address.

func ListenInsecure

func ListenInsecure(conn net.PacketConn, config *quic.Config) (*quic.Listener, error)

ListenInsecure generates a new self-signed certificate and then listens for QUIC connections on a given net.PacketConn.