tlscryptowatch

Documentation

Index

• func CipherSuitesIDs(names []string) []uint16
• func SelectCipherSuitesAndMinTLSVersion(profile *ocpconfigv1.TLSSecurityProfile) ([]string, ocpconfigv1.TLSProtocolVersion)
• type CdiConfigTLSWatcher
  • func NewCdiConfigTLSWatcher(ctx context.Context, cdiClient cdiclient.Interface) (CdiConfigTLSWatcher, error)
• type CryptoConfig
  • func DefaultCryptoConfig() *CryptoConfig

Functions

func CipherSuitesIDs

func CipherSuitesIDs(names []string) []uint16

CipherSuitesIDs translates cipher names to IDs which can be straight to the tls.Config

func SelectCipherSuitesAndMinTLSVersion

func SelectCipherSuitesAndMinTLSVersion(profile *ocpconfigv1.TLSSecurityProfile) ([]string, ocpconfigv1.TLSProtocolVersion)

SelectCipherSuitesAndMinTLSVersion returns cipher names and minimal TLS version according to the input profile

Types

type CdiConfigTLSWatcher

type CdiConfigTLSWatcher interface {
	GetCdiTLSConfig() *CryptoConfig
	GetInformer() cache.SharedIndexInformer
}

CdiConfigTLSWatcher is the interface of cdiConfigTLSWatcher

func NewCdiConfigTLSWatcher

func NewCdiConfigTLSWatcher(ctx context.Context, cdiClient cdiclient.Interface) (CdiConfigTLSWatcher, error)

NewCdiConfigTLSWatcher crates a new cdiConfigTLSWatcher

type CryptoConfig

type CryptoConfig struct {
	CipherSuites []uint16
	MinVersion   uint16
}

CryptoConfig contains TLS crypto configurables

func DefaultCryptoConfig

func DefaultCryptoConfig() *CryptoConfig

DefaultCryptoConfig returns a crypto config with legitimate defaults to start with