Module tls_config 

Structs

CliCertVerifier 🔒

SrvrCertVerifier 🔒

Constants

BAD_ENCODING_ERR 🔒

BAD_SIGNATURE_ERR 🔒

PEER_ID_EXT_OID 🔒

OID for the karyon peer-id custom extension.

Statics

CIPHER_SUITES 🔒

KX_GROUPS 🔒

PROTOCOL_VERSIONS 🔒

SIGNATURE_SCHEMES 🔒

Functions

generate_cert 🔒

Generates a certificate and returns both the certificate and the private key.

parse_cert 🔒

Parses the given x509 certificate.

peer_id_from_certs 🔒

Derive the peer id from a peer’s certificate chain post-handshake. Reuses verify_cert so the validation rules stay in one place. Returns None if the chain is empty or the cert lacks our extension.

tls_client_config

Returns a TLS client configuration.

tls_server_config

Returns a TLS server configuration.

verify_cert 🔒

Verifies the given certification.

verify_cert_signature 🔒

Verifies the signature of the given certificate.