Documentation
¶
Overview ¶
Package tlsutil provides shared TLS configuration utilities for parsing TLS settings and building crypto/tls.Config values. Callers should pass values from config.GetTLSMinVersionConfig / GetTLSCipherSuitesConfig.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func BuildTLSConfig ¶
func BuildTLSConfig(minVersion string, cipherSuites []string, opts ...TLSConfigOption) (*tls.Config, error)
BuildTLSConfig creates a tls.Config from TLS settings returned by config.GetTLSMinVersionConfig / GetTLSCipherSuitesConfig. Options (e.g., RootCAs, InsecureSkipVerify) are applied last.
func ParseTLSCipherSuites ¶
ParseTLSCipherSuites parses a slice of cipher suite names to their uint16 IDs. Returns nil if suites is empty or contains only empty strings (Go will use its default cipher suites).
func ParseTLSVersion ¶
ParseTLSVersion parses a TLS version string (e.g., "1.2", "1.3") to a tls.Version constant. Returns tls.VersionTLS12 as default if version is empty.
Types ¶
type TLSConfigOption ¶
TLSConfigOption is a function that modifies a tls.Config.
func WithInsecureSkipVerify ¶
func WithInsecureSkipVerify(skip bool) TLSConfigOption
WithInsecureSkipVerify sets InsecureSkipVerify on the TLS config.
func WithRootCAs ¶
func WithRootCAs(pool *x509.CertPool) TLSConfigOption
WithRootCAs sets custom root CAs on the TLS config.
Source Files