secutil

Documentation

Overview

Package secutil provides security utility helpers shared across GoCell adapters.

Index

• func ValidateTLSEndpoint(raw string) error

Functions

func ValidateTLSEndpoint

func ValidateTLSEndpoint(raw string) error

ValidateTLSEndpoint validates that a remote endpoint addr enforces TLS, with a loopback-IP-literal exception for dev/CI testcontainers. Accepts:

• URL form (scheme://host[:port][/path]): scheme must be one of {https, rediss, tls, wss, vault+https}; or unix:// with an empty host (local socket path only).
• Bare host:port form: host must be a loopback IP literal (127.x.x.x, ::1, or IPv4-mapped IPv6), OR fail-closed. The string "localhost" is not accepted for non-TLS endpoints.

Returns errcode.ErrAdapterEndpointNotTLS-tagged error otherwise.

ref: docs/plans/202604270020-1-2-ci-3-claude-ship-reactive-bachman.md PR-MODE-1