certutil

Documentation

Index

• type GetFunc
  • func WrapAutoCert(f GetFunc, manualCerts map[string]*tls.Certificate) GetFunc

Types

type GetFunc

type GetFunc func(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetFunc is the function that gets TLS certificate based on the HelloInfo.

func WrapAutoCert

func WrapAutoCert(
	f GetFunc, manualCerts map[string]*tls.Certificate,
) GetFunc

WrapAutoCert wraps the GetCertificate function. The resulting function adds a small delay of several seconds for the first time a certificate is requested, so that newly issued certificates won't be rejected upright by strict browsers on failed SCT timestamps checking due to clock skews. Optinally, a map of manual certificates can be used for a set of domains.