Documentation
¶
Overview ¶
Package tlsutil holds module-internal TLS helpers shared by the grpcsrv and grpcclient transport-credential builders. It is under internal/ so it is NOT part of the public corelib API surface — only kacho-corelib packages may import it.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func LoadCAPool ¶
LoadCAPool reads PEM CA bundles into an x509.CertPool. An empty/garbage bundle (no parseable certificate) is an error — fail-closed. This is the single source of truth for CA-pool loading on both the server (client-CA verification) and client (server-CA verification) transport edges, so a future hardening of the CA policy applies to both edges at once (previously the two copies could silently diverge).
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.