trust

Documentation

Index

• func LoadClientCertificate(certFile, keyFile string) (*tls.Certificate, error)
• func LoadPool(opts Options) (*x509.CertPool, error)
• func NewHTTP(pool *x509.CertPool, clientCert *tls.Certificate, minTLS uint16, ...) (*http.Client, context.Context)
• type Options

Functions

func LoadClientCertificate

func LoadClientCertificate(certFile, keyFile string) (*tls.Certificate, error)

LoadClientCertificate loads a client certificate and private key for mutual TLS authentication

func LoadPool

func LoadPool(opts Options) (*x509.CertPool, error)

LoadPool creates a certificate pool with system roots plus optional extras

func NewHTTP

func NewHTTP(pool *x509.CertPool, clientCert *tls.Certificate, minTLS uint16, timeout time.Duration) (*http.Client, context.Context)

NewHTTP creates an HTTP client with the given certificate pool, client cert, and TLS settings The timeout parameter is ignored - timeouts should be controlled per-request via context

Types

type Options

type Options struct {
	CACertFile     string        // Path to PEM bundle file
	CACertDir      string        // Directory containing *.pem or *.crt files
	ClientCertFile string        // Path to client certificate file
	ClientKeyFile  string        // Path to client certificate private key file
	Timeout        time.Duration // HTTP client timeout
	MinTLS         uint16        // Minimum TLS version
}

Options configures certificate loading and HTTP client behavior