ca

Documentation

Overview

Copyright IBM Corp. All Rights Reserved.

SPDX-License-Identifier: Apache-2.0

Index

• func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)
• type CA
  • func NewCA(...) (*CA, error)
  • func NewGMCA(...) (*CA, error)
  • func (ca *CA) SignCertificate(baseDir, name string, ous, sans []string, pub *ecdsa.PublicKey, ...) (*x509.Certificate, error)
  • func (ca *CA) SignGMCertificate(baseDir, name string, ous, sans []string, pub *sm2.PublicKey, ...) (*x509.Certificate, error)

Functions

func LoadCertificateECDSA

func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)

LoadCertificateECDSA load a ecdsa cert from a file in cert path

Types

type CA

type CA struct {
	Name               string
	Country            string
	Province           string
	Locality           string
	OrganizationalUnit string
	StreetAddress      string
	PostalCode         string
	//SignKey  *ecdsa.PrivateKey
	Signer   crypto.Signer
	SignCert *x509.Certificate
}

func NewCA

func NewCA(baseDir, org, name, country, province, locality, orgUnit, streetAddress, postalCode string) (*CA, error)

NewCA creates an instance of CA and saves the signing key pair in baseDir/name

func NewGMCA

func NewGMCA(baseDir, org, name, country, province, locality, orgUnit, streetAddress, postalCode string) (*CA, error)

NewCA creates an instance of CA and saves the signing key pair in baseDir/name

func (*CA) SignCertificate

func (ca *CA) SignCertificate(baseDir, name string, ous, sans []string, pub *ecdsa.PublicKey,
	ku x509.KeyUsage, eku []x509.ExtKeyUsage) (*x509.Certificate, error)

SignCertificate creates a signed certificate based on a built-in template and saves it in baseDir/name

func (*CA) SignGMCertificate

func (ca *CA) SignGMCertificate(baseDir, name string, ous, sans []string, pub *sm2.PublicKey,
	ku x509GM.KeyUsage, eku []x509GM.ExtKeyUsage) (*x509.Certificate, error)