Documentation
¶
Overview ¶
Package tlsfiles loads the configured TLS identity and trust roots of a daemon, and refuses at startup what would fail every handshake later. Each error names the configuration key an operator has to correct.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func KeyPair ¶
KeyPair loads a certificate and its key, and refuses a certificate outside its validity window: an expired or not yet valid identity fails every handshake, so it is reported once here instead of as an unexplained rejection per connection. certField and keyField are the configuration keys that name the two files.
func TrustRoots ¶
TrustRoots reads an authority file and refuses one that cannot verify anything: a file holding no certificate, a certificate that does not parse, and a root outside its validity window, which would fail every chain built on it. A file may hold several roots, which is what an authority rotation needs while old and new leaves are both in use.
Types ¶
This section is empty.
Source Files