Versions in this module Expand all Collapse all v0 v0.1.1 Apr 14, 2026 v0.1.0 Apr 14, 2026 Changes in this version + func CertExpiry(cert tls.Certificate) (notAfter time.Time, daysRemaining int, err error) + func ClientConfig(rootCA *x509.CertPool, clientCert *tls.Certificate, opts ...TLSOption) *tls.Config + func LoadCertKey(certFile, keyFile string, opts *SecurityOpts) (tls.Certificate, error) + func SecurityEnforced() bool + func ServerConfig(cert tls.Certificate, clientCA *x509.CertPool, opts ...TLSOption) *tls.Config + type FilePerm struct + Gid int + Perm fs.FileMode + Uid int + type OwnershipError = safeio.OwnershipError + type PermissionError = safeio.PermissionError + type Pool struct + func (p *Pool) Count() int + func (p *Pool) Pool() *x509.CertPool + func (p *Pool) Source(cert *x509.Certificate) string + func (p *Pool) Sources() []string + type SecurityOpts struct + Cert FilePerm + Filter func(name string) bool + Key FilePerm + Role string + func DefaultSecurityOpts() *SecurityOpts + type Store struct + func NewStore(opts *SecurityOpts) *Store + func NewSystemStore(opts *SecurityOpts) (*Store, error) + func (s *Store) Close() error + func (s *Store) Count() (int, error) + func (s *Store) Finalize() (*Pool, error) + func (s *Store) LoadCADir(dir string, recurse bool) (int, error) + func (s *Store) LoadCAFile(path string) (int, error) + func (s *Store) SecurityEnforced() bool + func (s *Store) Sources() ([]string, error) + type TLSOption func(*tls.Config) + func WithClientAuth(mode tls.ClientAuthType) TLSOption + func WithMinVersion(v uint16) TLSOption + func WithNextProtos(protos ...string) TLSOption + func WithSPKIPins(pins ...[]byte) TLSOption + func WithServerName(name string) TLSOption + func WithSessionTicketKeys(keys ...[32]byte) TLSOption