Kubernetes.Client.Internal.TLSUtils

Documentation

defaultTLSClientParams :: IO ClientParams

Default TLS settings using the system CA store.

parsePEMCerts :: ByteString -> Either ParseCertException [SignedCertificate]

Parses a PEM-encoded ByteString into a list of certificates.

updateClientParams :: ClientParams -> ByteString -> Either ParseCertException ClientParams

Updates client params, sets CA store to passed bytestring of CA certificates

setCAStore :: [SignedCertificate] -> ClientParams -> ClientParams

Use a custom CA store.

setClientCert :: Credential -> ClientParams -> ClientParams

Use a client cert for authentication.

clientHooksL :: Lens' ClientParams ClientHooks

onServerCertificateL :: Lens' ClientParams (CertificateStore -> ValidationCache -> ServiceID -> CertificateChain -> IO [FailedReason])

clientSharedL :: Lens' ClientParams Shared

sharedCAStoreL :: Lens' Shared CertificateStore

disableServerNameValidation :: ClientParams -> ClientParams

Don't check whether the cert presented by the server matches the name of the server you are connecting to. This is necessary if you specify the server host by its IP address.

disableServerCertValidation :: ClientParams -> ClientParams

Insecure mode. The client will not validate the server cert at all.

onCertificateRequestL :: Lens' ClientParams (([CertificateType], Maybe [HashAndSignatureAlgorithm], [DistinguishedName]) -> IO (Maybe (CertificateChain, PrivKey)))

loadPEMCerts :: (MonadIO m, MonadThrow m) => FilePath -> m [SignedCertificate]

Loads certificates from a PEM-encoded file.

loadB64EncodedCert :: MonadThrow m => ByteString -> ByteString -> m Credential

Loads Base64 encoded certificate and private key

data ParseCertException

Constructors

PEMParsingFailed String

Base64ParsingFailed String

FailedToLoadCredential String

Instances

Show ParseCertException

Defined in Kubernetes.Client.Internal.TLSUtils

Methods

showsPrec :: Int -> ParseCertException -> ShowS

show :: ParseCertException -> String

showList :: [ParseCertException] -> ShowS

Exception ParseCertException

Defined in Kubernetes.Client.Internal.TLSUtils

Methods

toException :: ParseCertException -> SomeException

fromException :: SomeException -> Maybe ParseCertException

displayException :: ParseCertException -> String