Versions in this module Expand all Collapse all v0 v0.11.0 Oct 25, 2026 v0.10.0 Oct 20, 2026 Changes in this version + const ALPN + const MaxLeafLifetime + const RoleAPI + const RoleGuest + const ServerName + var ErrAuthorization = errors.New("management peer authorization unavailable or denied") + var ErrCertificate = errors.New("invalid management certificate") + var ErrIdentity = errors.New("invalid management certificate identity") + var ErrTrust = errors.New("management certificate trust unavailable") + func APIClientFingerprint(cert tls.Certificate) (string, error) + func ClientTLS(cert tls.Certificate, roots *x509.CertPool, expected Identity, ...) (*tls.Config, error) + func ServerTLS(cert tls.Certificate, roots *x509.CertPool, enrolled Identity, ...) (*tls.Config, error) + func TrustRoots(bundle []byte) (*x509.CertPool, error) + func VerifiedAPIFingerprint(state tls.ConnectionState) (string, error) + type Authority struct + func NewAuthority(caDER []byte, signer crypto.Signer) (*Authority, error) + func (a *Authority) GoString() string + func (a *Authority) Issue(csrDER []byte, identity Identity, now time.Time, lifetime time.Duration) ([]byte, error) + func (a *Authority) String() string + type AuthorizePeer func(Identity) error + type Identity struct + Generation string + Namespace string + ReplicaID string + RevocationEpoch uint64 + Role string + WorkspaceName string + WorkspaceUID string + func CertificateIdentity(cert *x509.Certificate) (Identity, error) + func (i Identity) URI() (*url.URL, error)
Go to main page