Documentation
¶
Overview ¶
Package pki generates the self-signed CA, server and client certificates used for mutual TLS between awg-admin and an agent listening on a public ("white") IP. Certificates are generated locally by awg-admin and stored in its own database (models.AgentTLS); the server certificate and CA are deployed to the agent alongside its binary, the client certificate is kept by awg-admin to authenticate itself when dialing the agent directly.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func IssueAgentTLS ¶
IssueAgentTLS generates a fresh CA plus a server certificate (valid for host, covering the given IPs/DNS names so it matches whatever "white" IP or hostname the agent will be reached on) and a client certificate that awg-admin will present to the agent.
Types ¶
This section is empty.
Source Files