NewServerTLSConfig: generate TLS config for server side controlling the security level by authType
(caPem, certPem, keyPem []byte, authType tls.ClientAuthType)
| 14 | // NewServerTLSConfig: generate TLS config for server side |
| 15 | // controlling the security level by authType |
| 16 | func NewServerTLSConfig(caPem, certPem, keyPem []byte, authType tls.ClientAuthType) *tls.Config { |
| 17 | pool := x509.NewCertPool() |
| 18 | if !pool.AppendCertsFromPEM(caPem) { |
| 19 | panic("failed to add ca PEM") |
| 20 | } |
| 21 | |
| 22 | cert, err := tls.X509KeyPair(certPem, keyPem) |
| 23 | if err != nil { |
| 24 | panic(err) |
| 25 | } |
| 26 | |
| 27 | config := &tls.Config{ |
| 28 | ClientAuth: authType, |
| 29 | Certificates: []tls.Certificate{cert}, |
| 30 | ClientCAs: pool, |
| 31 | } |
| 32 | return config |
| 33 | } |
| 34 | |
| 35 | // extract RSA public key from certificate |
| 36 | func getPublicKeyFromCert(certPem []byte) []byte { |