CipherSuitesToNamesOrDie given a list of cipher suites as ints, return their readable names.

CipherSuiteToNameOrDie given a cipher suite as an int, return its readable name.

EnsureCA returns a CA, whether it was created (as opposed to pre-existing), and any error if serialFile is empty, a RandomSerialGenerator will be used.

FilterExpiredCerts checks are all certificates in the bundle valid, i.e.

if serialFile is empty, a RandomSerialGenerator will be used.

TLS versions that are known to golang, but may not necessarily be enabled.

if serialFile is empty, a RandomSerialGenerator will be used.

Can be used as a certificate in http.Transport TLSClientConfig.

Can be used as a certificate in http.Transport TLSClientConfig.

OpenSSLToIANACipherSuites maps input OpenSSL Cipher Suite names to their IANA counterparts.

SecureTLSConfig enforces the default minimum security settings for the cluster.

TLSVersionToNameOrDie given a tls version as an int, return its readable name.

Returns the build enabled TLS versions.

5 years.

2 years.

RandomSerialGenerator returns a serial based on time.Now and the subject.

SerialFileGenerator returns a unique, monotonically increasing serial number and ensures the CA on disk records that value.

SerialGenerator is an interface for getting a serial number for the cert.

CertificateExtensionFunc is passed a certificate that it may extend, or return an error if the extension attempt failed.