utils

Documentation

Index

• Variables
• func BuildInboundTLS(mTLSMode model.MutualTLSMode, node *model.Proxy, ...) *tls.DownstreamTlsContext
• func GetMinTLSVersion(ver meshconfig.MeshConfig_TLSConfig_TLSProtocol) tls.TlsParameters_TlsProtocol

Variables

var SupportedCiphers = []string{
	"ECDHE-ECDSA-AES256-GCM-SHA384",
	"ECDHE-RSA-AES256-GCM-SHA384",
	"ECDHE-ECDSA-AES128-GCM-SHA256",
	"ECDHE-RSA-AES128-GCM-SHA256",
	"AES256-GCM-SHA384",
	"AES128-GCM-SHA256",
}

SupportedCiphers for server side TLS configuration.

Functions

func BuildInboundTLS

func BuildInboundTLS(mTLSMode model.MutualTLSMode, node *model.Proxy,
	protocol networking.ListenerProtocol, trustDomainAliases []string, minTLSVersion tls.TlsParameters_TlsProtocol,
	mc *meshconfig.MeshConfig,
) *tls.DownstreamTlsContext

BuildInboundTLS returns the TLS context corresponding to the mTLS mode.

func GetMinTLSVersion

func GetMinTLSVersion(ver meshconfig.MeshConfig_TLSConfig_TLSProtocol) tls.TlsParameters_TlsProtocol

GetMinTLSVersion returns the minimum TLS version for workloads based on the mesh config.