certs

Documentation

Overview

Package certs provides helper libraries for generating self-signed certificates, which we use locally for authorizing users to read packet data.

Index

• func ClientVerifyingTLSConfig(certFile string) (*tls.Config, error)
• func WriteNewCerts(certFile, keyFile string, server bool) error

Functions

func ClientVerifyingTLSConfig

func ClientVerifyingTLSConfig(certFile string) (*tls.Config, error)

ClientVerifyingTLSConfig returns a TLS config which verifies that clients have a certificate signed by the CA certificate in the certFile.

func WriteNewCerts

func WriteNewCerts(certFile, keyFile string, server bool) error

WriteNewCerts generates a self-signed certificate pair for use in locally authorizing clients. If 'server' is true, it writes out certs which can be used to verify the server, otherwise it writes out certs clients can use to authorize themselves to the server.