Documentation
¶
Index ¶
Constants ¶
View Source
const PeerUser = "peer"
PeerUser is the reserved username peer nodes authenticate with. Certificates presented for this user are checked against the peer certificate authorities instead of the user-facing ones, so inter-node trust can be layered on top of existing deployments without touching their user certificate authority.
Variables ¶
View Source
var (
ErrInvalidCredentials = errors.New("auth: invalid credentials")
)
Functions ¶
Types ¶
type Settings ¶ added in v0.5.0
type Settings struct {
// certificate authorities trusted for regular user certificates
CAPublicKeys []ssh.PublicKey
// certificate authorities trusted for peer node certificates, empty
// disables inbound peer connections
PeerCAPublicKeys []ssh.PublicKey
// id of this node, recorded on users at auth time for mesh tunneling
NodeID string
// path to the geoip database file
GeoipDatabase string
}
Click to show internal directories.
Click to hide internal directories.