GenerateCA generates a new CA for agent TLS (not to be confused with Connect TLS).

GenerateCert generates a new certificate for agent TLS (not to be confused with Connect TLS).

GeneratePrivateKey generates a new ecdsa private key.

GenerateSerialNumber returns random bigint generated with crypto/rand.

ParseCert parses the x509 certificate from a PEM-encoded value.

ParseCiphers parses ciphersuites from the comma-separated string into recognized slice.

ParseMinVersion parses the specified minimum TLS version for the Nomad agent.

ParseSigner parses a crypto.Signer from a PEM-encoded key.

RegionSpecificWrapper is used to invoke a static Region and turns a RegionWrapper into a Wrapper type.

ShouldReloadRPCConnections compares two TLS Configurations and determines whether they differ such that RPC connections should be reloaded.

WrapTLSClient wraps a net.Conn into a client tls connection, performing any additional verification as needed.

Config used to create tls.Config.

RegionWrapper is a function that is used to wrap a non-TLS connection and returns an appropriate TLS connection or error.

Wrapper wraps a connection and enables TLS on it.