Documentation
¶
Overview ¶
Package enginetrust validates inline trust for projection engine clients.
Index ¶
- func FalkorTLS(addr, mode string, ca []byte) (*tls.Config, error)
- func RESPTLS(engine, addr, mode string, ca []byte) (*tls.Config, error)
- func RedisTLS(addr, mode string, ca []byte) (*tls.Config, error)
- func TLSDialer(cfg *tls.Config, timeout time.Duration) func(ctx context.Context, network, addr string) (net.Conn, error)
- func ValidateElasticsearch(addrs []string, ca []byte) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func FalkorTLS ¶
FalkorTLS validates FalkorDB's mode, address and optional CA. A nil config uses plaintext.
func RESPTLS ¶
RESPTLS validates TLS settings for a RESP engine reached through go-redis. engine names it in errors, which never repeat a configured value. mode is empty or disable for plaintext, or verify-full to check the certificate and the endpoint name, against ca when given and the system roots when not. A nil config uses plaintext.
func RedisTLS ¶
RedisTLS validates the Redis stream transport's mode, address and optional CA. A nil config uses plaintext.
func TLSDialer ¶
func TLSDialer(cfg *tls.Config, timeout time.Duration) func(ctx context.Context, network, addr string) (net.Conn, error)
TLSDialer returns a go-redis dialer that completes the TLS handshake under the caller's context, so cancelling a probe or closing the client stops a stalled handshake instead of waiting for it.
func ValidateElasticsearch ¶
ValidateElasticsearch checks that an inline CA has only HTTPS endpoints and valid PEM.
Types ¶
This section is empty.
Source Files