tlsutil

package

v2.56.0 Latest Latest Go to latest Published: Oct 13, 2026 License: MIT Imports: 6 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type CertLoader struct {
	CertFile string
	KeyFile  string
	// contains filtered or unexported fields
}

CertLoader is a hot-reloading TLS key-pair loader. It caches the parsed key pair and reloads from disk when the cert file's mtime changes.

A CertLoader has callback functions allowing it to be used for client and server connections.

func NewCertLoader(certFile, keyFile string) *CertLoader

func (l *CertLoader) GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate is a tls.Config.GetCertificate callback used when terminating inbound TLS from clients.

func (l *CertLoader) GetClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Certificate, error)

GetClientCertificate is a tls.Config.GetClientCertificate callback used when communciating with the temporal frontend.