certificate

Documentation

Index

• func InitIdentityHandler(idCfg *config.IdentityConfig) (*identityHandler, error)
• func New(ctx context.Context, idCfg *config.IdentityConfig) (daemon.Daemon, error)
• func PrepareIdentityCsrOptions(idCfg *config.IdentityConfig, domain, service string) (*util.CSROptions, error)
• func PrepareRoleCsrOptions(idCfg *config.IdentityConfig, domain, service string) (*[]util.CSROptions, error)
• func PrivateKeyFromPEMBytes(privatePEMBytes []byte) (crypto.Signer, error)
• type InstanceIdentity
  • func InstanceIdentityFromPEMBytes(pemBytes []byte) (identity *InstanceIdentity, err error)
• type RoleCertificate

Functions

func InitIdentityHandler

func InitIdentityHandler(idCfg *config.IdentityConfig) (*identityHandler, error)

InitIdentityHandler initializes the ZTS client and parses the config to create CSR options

func New

func New(ctx context.Context, idCfg *config.IdentityConfig) (daemon.Daemon, error)

func PrepareIdentityCsrOptions

func PrepareIdentityCsrOptions(idCfg *config.IdentityConfig, domain, service string) (*util.CSROptions, error)

PrepareIdentityCsrOptions prepares csrOptions for an X.509 certificate

func PrepareRoleCsrOptions

func PrepareRoleCsrOptions(idCfg *config.IdentityConfig, domain, service string) (*[]util.CSROptions, error)

PrepareRoleCsrOptions prepares csrOptions for an X.509 certificate

func PrivateKeyFromPEMBytes

func PrivateKeyFromPEMBytes(privatePEMBytes []byte) (crypto.Signer, error)

PrivateKeyFromPEMBytes returns a private key along with its type from its supplied PEM representation.

Types

type InstanceIdentity

type InstanceIdentity struct {
	X509CertificatePEM   string
	X509CACertificatePEM string
}

InstanceIdentity stores instance identity certificate

func InstanceIdentityFromPEMBytes

func InstanceIdentityFromPEMBytes(pemBytes []byte) (identity *InstanceIdentity, err error)

InstanceIdentityFromPEMBytes returns an InstanceIdentity from its supplied PEM representation.

type RoleCertificate

type RoleCertificate struct {
	Domain          string
	Role            string
	Subject         pkix.Name
	Issuer          pkix.Name
	NotBefore       time.Time
	NotAfter        time.Time
	SerialNumber    *big.Int
	DNSNames        []string
	X509Certificate string
}

RoleCertificate stores role certificate