wcrypto

package

v0.2.2 Latest Latest Go to latest Published: May 30, 2020 License: Apache-2.0 Imports: 15 Imported by: 0

Details

View Source

const TokenBitsLength = 6 * 4 * 3

View Source

var DefaultKeyType = KeyRSA4096

View Source

var ErrPublicKeyMismatch = errors.New("Public keys do not match.")

View Source

var ServerKeyType = KeySECP256R1

func ExtractPublicKey(priv crypto.PrivateKey) (crypto.PublicKey, error)

func GenBase64Token(randr io.Reader, logger *zap.Logger) (string, error)

func GenerateKey(randr io.Reader, ktype KeyType, usage string, logger *zap.Logger) (crypto.PrivateKey, error)

func PubKeyPinString(pub crypto.PublicKey) (string, error)

PubKeyPinString extracts the SHA256 hash for use of curl`s --pinnedpubkey commandline option.

func SubjectKeyIdFromPubkey(pub crypto.PublicKey) ([]byte, error)

func VerifyCACert(cert *x509.Certificate, t time.Time) error

func VerifyCACertAndKey(priv crypto.PrivateKey, cert *x509.Certificate, t time.Time) error

func VerifyPublicKeyMatch(a, b crypto.PublicKey) error

func VerifyServerCert(cert *x509.Certificate, cacert *x509.Certificate, t time.Time) error

type KeyType int

const (
	KeyAny KeyType = iota
	KeyRSA4096
	KeySECP256R1
)

func KeyTypeFromString(s string) (KeyType, error)

func KeyTypeOfPub(pub crypto.PublicKey) (KeyType, error)

func (expected KeyType) CompatibleWith(actual KeyType) error

func (kt KeyType) String() string

func (p *KeyType) UnmarshalFlag(s string) error

func (p *KeyType) UnmarshalYAML(unmarshal func(interface{}) error) error

type UnexpectedKeyTypeErr struct {
	Expected KeyType
	Actual   KeyType
}

func (e UnexpectedKeyTypeErr) Error() string

func (UnexpectedKeyTypeErr) Is(target error) bool