issue

Documentation

Index

• Variables
• func Run(env *action.Environment, pub crypto.PublicKey, cfg *Config) ([]byte, error)
• type Config
  • func ConfigFromCert(cert *x509.Certificate) (*Config, error)
  • func DefaultConfig(baseSubject *dname.Config) *Config
  • func EmptyConfig() *Config
  • func (a *Config) CompatibleWith(b *Config) error
  • func (cfg *Config) Verify(now time.Time) error

Variables

var ErrValidityPeriodExpired = errors.New("Declining to issue certificate which expires within 30 seconds.")

Functions

func Run

func Run(env *action.Environment, pub crypto.PublicKey, cfg *Config) ([]byte, error)

FIXME[P2]: make concurrent safe

Types

type Config

type Config struct {
	Subject  *dname.Config         `yaml:"subject" flags:""`
	Names    san.Names             `yaml:"subjectAltNames" flags:"subject-alt-name,set cert subjectAltNames,san"`
	KeyUsage keyusage.KeyUsage     `yaml:"keyUsage" flags:"key-usage,what the key/cert is used for (tlsServer, tlsClient, tlsClientServer),ku"`
	Validity period.ValidityPeriod `yaml:"validity" flags:"validity,time duration/timestamp where the cert is valid to (examples: 30d, 1y, 20220530)"`
	KeyType  wcrypto.KeyType       `yaml:"keyType" flags:"key-type,private key type (rsa, ecdsa),t"`

	// Don't create issuedb entry.
	NoIssueDBEntry bool
}

func ConfigFromCert

func ConfigFromCert(cert *x509.Certificate) (*Config, error)

func DefaultConfig

func DefaultConfig(baseSubject *dname.Config) *Config

func EmptyConfig

func EmptyConfig() *Config

func (*Config) CompatibleWith

func (a *Config) CompatibleWith(b *Config) error

func (*Config) Verify

func (cfg *Config) Verify(now time.Time) error