CertificateTokenDecode decodes a base64 and JSON encoded certificate add token.

FindOrGenCert generates a keypair if needed.

GenCert will create and populate a certificate file and a key file.

GenerateMemCert creates client or server certificate and key pair, returning them as byte arrays in memory.

GenerateTrustCertificate converts the specified serverCert and serverName into an api.Certificate suitable for use as a trusted cluster server certificate.

InitTLSConfig returns a tls.Config populated with default encryption parameters.

IsConnectionError returns true if the given error is due to the dialer not being able to connect to the target.

KeyPairAndCA returns a CertInfo object with a reference to the key pair and (optionally) CA certificate located in the given directory and having the given name prefix The naming conversion for the various PEM encoded files is: <prefix>.crt -> public key <prefix>.key -> private key <prefix>.ca -> CA certificate (optional) ca.crl -> CA certificate revocation list (optional) If no public/private key files are found, a new key pair will be generated and saved on disk.

KeyPairFromRaw returns a CertInfo from the raw certificate and key.

RFC3493Dialer connects to the specified server and returns the connection.

TestingAltKeyPair returns CertInfo object initialized with a test keypair which differs from the one returned by TestCertInfo.

TestingKeyPair returns CertInfo object initialized with a test keypair.

Possible kinds of certificates.

Possible kinds of certificates.

CertInfo captures TLS certificate information about a certain public/private keypair and an optional CA certificate and CRL.

CertKind defines the kind of certificate to generate from scratch in KeyPairAndCA when it's not there.