crypto

Documentation

Overview

Package crypto provides the basis for secure communication in pluto. Other than making proper TLS configurations for public as well as internal usage available, it also provides a script to set up the needed internal PKI for secure and authenticated communication between pluto's nodes.

Index

• func NewInternalTLSConfig(certPath string, keyPath string, rootCertPath string) (*tls.Config, error)
• func NewPublicTLSConfig(certPath string, keyPath string) (*tls.Config, error)

Functions

func NewInternalTLSConfig

func NewInternalTLSConfig(certPath string, keyPath string, rootCertPath string) (*tls.Config, error)

NewInternalTLSConfig returns a TLS config that is already configured completely for use in nodes to communicate internally. It defines very strict defaults and requires all nodes to verify each other by TLS means.

func NewPublicTLSConfig

func NewPublicTLSConfig(certPath string, keyPath string) (*tls.Config, error)

NewPublicTLSConfig returns a TLS config that is to be used when exposing ports to the public Internet. It defines very strict defaults but assumes that available system cert pools will be used when verifying certificates.