Documentation
¶
Overview ¶
Package x509util contains helper functions to deal with certificates.
Index ¶
- Variables
- func CustomCertPool(caPath string) (*x509.CertPool, error)
- type CertWatcher
- func (cw *CertWatcher) GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)
- func (cw *CertWatcher) ReadCertificate() error
- func (cw *CertWatcher) RegisterCallback(callback func(tls.Certificate))
- func (cw *CertWatcher) Start(ctx context.Context) error
- func (cw *CertWatcher) Watch()
- func (cw *CertWatcher) WithWatchInterval(interval time.Duration) *CertWatcher
Constants ¶
This section is empty.
Variables ¶
var ( ReadTotal = prometheus.NewCounter(prometheus.CounterOpts{ Name: "certwatcher_read_certificate_total", Help: "Total number of certificate reads", }) ReadErrors = prometheus.NewCounter(prometheus.CounterOpts{ Name: "certwatcher_read_certificate_errors_total", Help: "Total number of certificate read errors", }) )
Functions ¶
Types ¶
type CertWatcher ¶ added in v1.52.0
type CertWatcher struct {
// metrics
ReadCertificateTotal prometheus.Counter
ReadCertificateErrors prometheus.Counter
// contains filtered or unexported fields
}
CertWatcher watches certificate and key files for changes. It always returns the cached version, but periodically reads and parses certificate and key for changes and calls an optional callback with the new certificate.
func NewTLSCertWatcher ¶ added in v1.52.0
func NewTLSCertWatcher(certPath, keyPath string) (*CertWatcher, error)
NewTLSCertWatcher returns a new CertWatcher watching the given certificate and key. It registers prometheus metrics for certificate read counts and errors. The metrics are unregistered when Start returns.
func (*CertWatcher) GetCertificate ¶ added in v1.52.0
func (cw *CertWatcher) GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)
GetCertificate fetches the currently loaded certificate, which may be nil.
func (*CertWatcher) ReadCertificate ¶ added in v1.52.0
func (cw *CertWatcher) ReadCertificate() error
ReadCertificate reads the certificate and key files from disk, parses them, and updates the current certificate on the watcher if updated. If a callback is set, it is invoked with the new certificate.
func (*CertWatcher) RegisterCallback ¶ added in v1.52.0
func (cw *CertWatcher) RegisterCallback(callback func(tls.Certificate))
RegisterCallback registers a callback to be invoked when the certificate changes.
func (*CertWatcher) Start ¶ added in v1.52.0
func (cw *CertWatcher) Start(ctx context.Context) error
Start starts the watch on the certificate and key files. When Start returns, it unregisters the prometheus metrics that were registered in NewTLSCertWatcher.
func (*CertWatcher) Watch ¶ added in v1.52.0
func (cw *CertWatcher) Watch()
Watch reads events from the watcher's channel and reacts to changes.
func (*CertWatcher) WithWatchInterval ¶ added in v1.52.0
func (cw *CertWatcher) WithWatchInterval(interval time.Duration) *CertWatcher
WithWatchInterval sets the watch interval and returns the CertWatcher pointer
Source Files