certs

Documentation

Index

• func GetRootCAs(certsCAsDir string) (*x509.CertPool, error)
• type Certs
  • func New(certFile, keyFile string, loadCert LoadX509KeyPairFunc) (*Certs, error)
  • func (c *Certs) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (c *Certs) GetClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Certificate, error)
  • func (c *Certs) Stop()
• type GetCertificateFunc
• type LoadX509KeyPairFunc

Functions

func GetRootCAs

func GetRootCAs(certsCAsDir string) (*x509.CertPool, error)

GetRootCAs - returns all the root CAs into certPool at the input certsCADir

Types

type Certs

type Certs struct {
	sync.RWMutex
	// contains filtered or unexported fields
}

A Certs represents a certificate manager able to watch certificate and key pairs for changes.

func New

func New(certFile, keyFile string, loadCert LoadX509KeyPairFunc) (*Certs, error)

New initializes a new certs monitor.

func (*Certs) GetCertificate

func (c *Certs) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate returns the loaded certificate for use by the TLSConfig fields GetCertificate field in a http.Server.

func (*Certs) GetClientCertificate

func (c *Certs) GetClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Certificate, error)

GetClientCertificate returns the loaded certificate for use by the TLSConfig fields GetClientCertificate field in a http.Server.

func (*Certs) Stop

func (c *Certs) Stop()

Stop tells loader to stop watching for changes to the certificate and key files.

type GetCertificateFunc

type GetCertificateFunc func(hello *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificateFunc provides a GetCertificate type for custom client implementations.

type LoadX509KeyPairFunc

type LoadX509KeyPairFunc func(certFile, keyFile string) (tls.Certificate, error)

LoadX509KeyPairFunc - provides a type for custom cert loader function.