Function ExpectPeerName

tlsutil/util.go:15–28

(name string, roots *x509.CertPool)

)

func ExpectPeerName(name string, roots *x509.CertPool) func(cs tls.ConnectionState) error {
	return func(cs tls.ConnectionState) error {
		opts := x509.VerifyOptions{
			Roots:         roots,
			DNSName:       name,
			Intermediates: x509.NewCertPool(),
		}
		for _, cert := range cs.PeerCertificates[1:] {
			opts.Intermediates.AddCert(cert)
		}
		_, err := cs.PeerCertificates[0].Verify(opts)
		return err
	}
}

func LoadCAfile(filename string) (*x509.CertPool, error) {
	roots := x509.NewCertPool()