Method ClientHandshake

internal/xds/bootstrap/tlscreds/bundle.go:123–142

(ctx context.Context, authority string, rawConn net.Conn)

}

func (c *reloadingCreds) ClientHandshake(ctx context.Context, authority string, rawConn net.Conn) (net.Conn, credentials.AuthInfo, error) {
	km, err := c.provider.KeyMaterial(ctx)
	if err != nil {
		return nil, nil, err
	}
	var config *tls.Config
	if km.SPIFFEBundleMap != nil {
		config = &tls.Config{
			InsecureSkipVerify:    true,
			VerifyPeerCertificate: buildSPIFFEVerifyFunc(km.SPIFFEBundleMap),
			Certificates:          km.Certs,
		}
	} else {
		config = &tls.Config{
			RootCAs:      km.Roots,
			Certificates: km.Certs,
		}
	}
	return credentials.NewTLS(config).ClientHandshake(ctx, authority, rawConn)
}

func (c *reloadingCreds) Info() credentials.ProtocolInfo {
	return credentials.ProtocolInfo{SecurityProtocol: "tls"}