Documentation
¶
Index ¶
- func ClientConfig(caCert, cert, key io.Reader) (*tls.Config, error)
- func GenerateCA(cn string, validity time.Time, keyAlg KeyAlg) ([]byte, []byte, error)
- func GenerateClientConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, ...) (*tls.Config, error)
- func GenerateClientConfigFromFile(caCertFile, caKeyFile string, validity time.Time, ...) (*tls.Config, error)
- func GenerateKeyPair(cfg *CertRequestConfig) ([]byte, []byte, error)
- func GenerateServerConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, ...) (*tls.Config, error)
- func GenerateServerConfigFromFile(caCertFile, caKeyFile string, validity time.Time, ...) (*tls.Config, error)
- func LoadCACertificate(caCert, caKey io.Reader) (tls.Certificate, error)
- func MarshalCAPEM(cp *CAPEM) ([]byte, error)
- func ServerConfig(caCert, cert, key io.Reader) (*tls.Config, error)
- type CAPEM
- type CertRequestConfig
- type CertRequestOption
- type KeyAlg
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ClientConfig ¶
ClientConfig returns a mTLS configuration for a client with the provided certificate and key.
func GenerateCA ¶
GenerateCA generates a CA certificate pair for a validity period with the corresponding key algorithm (RSA or ECDSA).
func GenerateClientConfig ¶
func GenerateClientConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, certOpts ...CertRequestOption) (*tls.Config, error)
GenerateClientConfig generates new client mTLS certificate based on the provided CA certificate/key for a validity period.
func GenerateClientConfigFromFile ¶
func GenerateClientConfigFromFile(caCertFile, caKeyFile string, validity time.Time, certOpts ...CertRequestOption) (*tls.Config, error)
GenerateClientConfigFromFile generates new client mTLS certificate based on the provided CA certificate/key for a validity period.
func GenerateKeyPair ¶
func GenerateKeyPair(cfg *CertRequestConfig) ([]byte, []byte, error)
GenerateKeyPair generates a certificate pair for a valid period and returns them in PEM byte format. the requested configuration must at least provide a CN and a validity period. By default a RSA key is generated if KeyAlg is not specified by the request, if the CA keys are provided it uses the key algorithm of the CA.
func GenerateServerConfig ¶
func GenerateServerConfig(caCertReader, caKeyReader io.ReadSeeker, validity time.Time, certOpts ...CertRequestOption) (*tls.Config, error)
GenerateServerConfig generates new server mTLS certificate based on the provided CA certificate/key for a validity period.
func GenerateServerConfigFromFile ¶
func GenerateServerConfigFromFile(caCertFile, caKeyFile string, validity time.Time, certOpts ...CertRequestOption) (*tls.Config, error)
GenerateServerConfigFromFile generates new server mTLS certificate based on the provided CA certificate/key for a validity period.
func LoadCACertificate ¶
func LoadCACertificate(caCert, caKey io.Reader) (tls.Certificate, error)
LoadCACertificate loads CA certificate and key
func MarshalCAPEM ¶
MarshalCAPEM encodes a CAPEM instance and returns bytes.
Types ¶
type CAPEM ¶
CAPEM defines CA certificate and key in PEM format.
func UnmarshalCAPEM ¶
UnmarshalCAPEM decodes a byte encoded CAPEM and returns an instance of it.
type CertRequestConfig ¶
type CertRequestConfig struct {
CN string
Validity time.Time
IP []net.IP
DNS []string
CA *tls.Certificate
KeyAlg KeyAlg
}
CertRequestConfig holds certificate creation configuration.
type CertRequestOption ¶
type CertRequestOption func(crc *CertRequestConfig)
CertRequestOption represents a certificate request option.
func WithCertRequestHostnames ¶
func WithCertRequestHostnames(hostnames ...string) CertRequestOption
WithCertRequestIPs specifies additional hostnames to add with the certificate request.
func WithCertRequestIPs ¶
func WithCertRequestIPs(ips ...net.IP) CertRequestOption
WithCertRequestIPs specifies additional IP address to add with the certificate request.
Source Files