cert-source

Overview

The cert-source is a library designed to help with loading of TLS certificates and to streamline the process of certificate rotation.

Usage

Installation

go get -u github.com/grepplabs/cert-source

TLS server

package main
import (
"fmt""log""log/slog""net/http""time"
tlsconfig "github.com/grepplabs/cert-source/config"
tlsserverconfig "github.com/grepplabs/cert-source/tls/server/config"
)
funcmain() {
tlsConfig, err:=tlsserverconfig.GetServerTLSConfig(slog.Default(), &tlsconfig.TLSServerConfig{
Enable: true,
Refresh: 1*time.Second,
File: tlsconfig.TLSServerFiles{
Key: "key.pem",
Cert: "cert.pem",
ClientCAs: "",
ClientCRL: "",
},
})
iferr!=nil {
log.Fatalln(err)
}
server:=&http.Server{
Addr: ":8443",
TLSConfig: tlsConfig,
}
http.HandleFunc("/", func(w http.ResponseWriter, r*http.Request) {
_, _=fmt.Fprintf(w, "Hello, TLS world!")
})
err=server.ListenAndServeTLS("", "")
iferr!=nil {
log.Fatalln(err)
}
}

TLS Client

package main
import (
"io""log""log/slog""net/http""time"
tlsconfig "github.com/grepplabs/cert-source/config"
tlsclient "github.com/grepplabs/cert-source/tls/client"
tlsclientconfig "github.com/grepplabs/cert-source/tls/client/config"
)
funcmain() {
tlsClientConfig, err:=tlsclientconfig.GetTLSClientConfig(slog.Default(), &tlsconfig.TLSClientConfig{
Enable: true,
Refresh: 1*time.Second,
InsecureSkipVerify: false,
File: tlsconfig.TLSClientFiles{
Key: "",
Cert: "",
RootCAs: "ca.pem",
},
})
iferr!=nil {
log.Fatalln(err)
}
transport:=tlsclient.NewDefaultRoundTripper(tlsclient.WithClientTLSConfig(tlsClientConfig))
client:=&http.Client{Transport: transport}
resp, err:=client.Get("https://localhost:8443")
iferr!=nil {
log.Fatalln(err)
}
deferresp.Body.Close()
body, err:=io.ReadAll(resp.Body)
iferr!=nil {
log.Fatalf("Failed to read response body: %v", err)
}
log.Printf("Server response: %s", body)
}