cert

Documentation

Index

• func ParseCertificate(certPEM, keyPEM []byte, password ...string) (tls.Certificate, error)
• func ParseCertificateFile(certFile, keyFile string, password ...string) (tls.Certificate, error)
• func PoolFromPem(pem []byte) (pool *x509.CertPool, ok bool)
• func PoolFromPemFile(pemFile string) (*x509.CertPool, error)
• type ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) TLSConfig() (*tls.Config, error)
  • func (o *ClientTLSConfigOptions) WithCA(caFilePath string) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithCAPem(pem []byte) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithClientCertificate(clientCertFile string, clientKeyFile string) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithClientCertificatePem(clientCertPem, clientKeyPem []byte) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithClientKeyPassword(password string) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithInsecure(insecure bool) *ClientTLSConfigOptions
  • func (o *ClientTLSConfigOptions) WithServerName(serverName string) *ClientTLSConfigOptions
• type ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) TLSConfig() (*tls.Config, error)
  • func (o *ServerTLSConfigOptions) WithCA(caFilePath string) *ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) WithCAPem(pem []byte) *ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) WithClientAuth(auth tls.ClientAuthType) *ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) WithServerCertificate(serverCertFile string, serverKeyFile string) *ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) WithServerCertificatePem(serverCertPem, serverKeyPem []byte) *ServerTLSConfigOptions
  • func (o *ServerTLSConfigOptions) WithServerKeyPassword(password string) *ServerTLSConfigOptions
• type TLSConfigOptions

Functions

func ParseCertificate

func ParseCertificate(certPEM, keyPEM []byte, password ...string) (tls.Certificate, error)

ParseCertificate 解析 PEM 证书文件

func ParseCertificateFile

func ParseCertificateFile(certFile, keyFile string, password ...string) (tls.Certificate, error)

func PoolFromPem

func PoolFromPem(pem []byte) (pool *x509.CertPool, ok bool)

func PoolFromPemFile

func PoolFromPemFile(pemFile string) (*x509.CertPool, error)

Types

type ClientTLSConfigOptions

type ClientTLSConfigOptions struct {
	CaPem             []byte
	CaFilePath        string
	ClientCertPem     []byte
	ClientCertFile    string
	ClientKeyPem      []byte
	ClientKeyFile     string
	ClientKeyPassword string
	ServerName        string // override default server name verification
	Insecure          bool
}

func (*ClientTLSConfigOptions) TLSConfig

func (o *ClientTLSConfigOptions) TLSConfig() (*tls.Config, error)

func (*ClientTLSConfigOptions) WithCA

func (o *ClientTLSConfigOptions) WithCA(caFilePath string) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithCAPem

func (o *ClientTLSConfigOptions) WithCAPem(pem []byte) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithClientCertificate

func (o *ClientTLSConfigOptions) WithClientCertificate(clientCertFile string, clientKeyFile string) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithClientCertificatePem

func (o *ClientTLSConfigOptions) WithClientCertificatePem(clientCertPem, clientKeyPem []byte) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithClientKeyPassword

func (o *ClientTLSConfigOptions) WithClientKeyPassword(password string) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithInsecure

func (o *ClientTLSConfigOptions) WithInsecure(insecure bool) *ClientTLSConfigOptions

func (*ClientTLSConfigOptions) WithServerName

func (o *ClientTLSConfigOptions) WithServerName(serverName string) *ClientTLSConfigOptions

type ServerTLSConfigOptions

type ServerTLSConfigOptions struct {
	ServerCertPem     []byte
	ServerCertFile    string
	ServerKeyPem      []byte
	ServerKeyFile     string
	ServerKeyPassword string
	ClientAuth        tls.ClientAuthType // for client auth
	CaPem             []byte             // for client auth
	CaFilePath        string             // for client auth
}

func (*ServerTLSConfigOptions) TLSConfig

func (o *ServerTLSConfigOptions) TLSConfig() (*tls.Config, error)

func (*ServerTLSConfigOptions) WithCA

func (o *ServerTLSConfigOptions) WithCA(caFilePath string) *ServerTLSConfigOptions

func (*ServerTLSConfigOptions) WithCAPem

func (o *ServerTLSConfigOptions) WithCAPem(pem []byte) *ServerTLSConfigOptions

func (*ServerTLSConfigOptions) WithClientAuth

func (o *ServerTLSConfigOptions) WithClientAuth(auth tls.ClientAuthType) *ServerTLSConfigOptions

func (*ServerTLSConfigOptions) WithServerCertificate

func (o *ServerTLSConfigOptions) WithServerCertificate(serverCertFile string, serverKeyFile string) *ServerTLSConfigOptions

func (*ServerTLSConfigOptions) WithServerCertificatePem

func (o *ServerTLSConfigOptions) WithServerCertificatePem(serverCertPem, serverKeyPem []byte) *ServerTLSConfigOptions

func (*ServerTLSConfigOptions) WithServerKeyPassword

func (o *ServerTLSConfigOptions) WithServerKeyPassword(password string) *ServerTLSConfigOptions

type TLSConfigOptions

type TLSConfigOptions = ClientTLSConfigOptions

TLSConfigOptions

Deprecated: use ClientTLSConfigOptions instead