Skip to content

v1.10.0
Compare
Choose a tag to compare
@Som-Som-CC Som-Som-CC released this 24 May 14:11
· 30 commits to main since this release
v1.10.0
0b82aed

CA pool allows using system CAs besides the CAs on the path provided. That introduces a minor backward incompatibility at some functions.

The affected functions:

  • Generic: NewCertPool
  • Server: StartTLS, ListenAndServeMTLS, TLSClientCert
  • Client: TLSRootCerts

Note: In case of a server, the role of mTLS is to authorize only certain clients to connect. So enable system CAs only if those are reasonable for auth. For example, under control of the system operator.

Assets 2
Loading