https://github.com/vkuznet/x509proxy
Library to handle X509 proxy certificates
https://github.com/vkuznet/x509proxy
Last synced: 6 days ago
JSON representation
Library to handle X509 proxy certificates
- Host: GitHub
- URL: https://github.com/vkuznet/x509proxy
- Owner: vkuznet
- License: mit
- Created: 2016-03-12T13:51:38.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2025-01-19T19:03:35.000Z (4 months ago)
- Last Synced: 2025-04-20T13:37:19.486Z (28 days ago)
- Language: Go
- Homepage:
- Size: 15.6 KB
- Stars: 6
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# x509proxy
[](https://github.com/dmwm/auth-proxy-server/actions/workflows/go-ci.yml)
[](https://godoc.org/github.com/vkuznet/x509proxy)
[](https://goreportcard.com/report/github.com/vkuznet/x509proxy)
[](https://coveralls.io/github/vkuznet/x509proxy)
[](https://zenodo.org/badge/latestdoi/53734052)
Package to handle X509 proxy certificates.
### Example
```go
import (
"crypto/tls"
"io/ioutil"
"log"
"net/http"
"github.com/vkuznet/x509proxy"
"os"
)
// load X509 certificates
func Certs() (tls_certs []tls.Certificate) {
uproxy := os.Getenv("X509_USER_PROXY")
uckey := os.Getenv("X509_USER_KEY")
ucert := os.Getenv("X509_USER_CERT")
log.Println("X509_USER_PROXY", uproxy)
log.Println("X509_USER_KEY", uckey)
log.Println("X509_USER_CERT", ucert)
if len(uproxy) > 0 {
// use local implementation of LoadX409KeyPair instead of tls one
x509cert, err := x509proxy.LoadX509Proxy(uproxy)
if err != nil {
log.Println("Fail to parser proxy X509 certificate", err)
return
}
tls_certs = []tls.Certificate{x509cert}
} else if len(uckey) > 0 {
x509cert, err := tls.LoadX509KeyPair(ucert, uckey)
if err != nil {
log.Println("Fail to parser user X509 certificate", err)
return
}
tls_certs = []tls.Certificate{x509cert}
} else {
return
}
return
}
// HTTP client
func HttpClient() (client *http.Client) {
// create HTTP client
certs := Certs()
log.Println("Number of certificates", len(certs))
if len(certs) == 0 {
client = &http.Client{}
return
}
tr := &http.Transport{
TLSClientConfig: &tls.Config{Certificates: certs,
InsecureSkipVerify: true},
}
log.Println("Create TLSClientConfig")
client = &http.Client{Transport: tr}
return
}
// create global HTTP client and re-use it through the code
var client = HttpClient()
// now you http client is ready to use X509 proxy
```