certs

Documentation

Index

• func AssertCertificateHasClientAuthUsage(t *testing.T, cert *x509.Certificate)
• func AssertCertificateHasCommonName(t *testing.T, cert *x509.Certificate, commonName string)
• func AssertCertificateHasDNSNames(t *testing.T, cert *x509.Certificate, DNSNames ...string)
• func AssertCertificateHasIPAddresses(t *testing.T, cert *x509.Certificate, IPAddresses ...net.IP)
• func AssertCertificateHasOrganizations(t *testing.T, cert *x509.Certificate, organizations ...string)
• func AssertCertificateHasServerAuthUsage(t *testing.T, cert *x509.Certificate)
• func AssertCertificateIsCa(t *testing.T, cert *x509.Certificate)
• func AssertCertificateIsSignedByCa(t *testing.T, cert *x509.Certificate, signingCa *x509.Certificate)
• func CreateCACert(t *testing.T) (*x509.Certificate, *rsa.PrivateKey)
• func CreateTestCert(t *testing.T, caCert *x509.Certificate, caKey *rsa.PrivateKey, ...) (*x509.Certificate, *rsa.PrivateKey, *certutil.Config)
• func SetupCertificateAuthorithy(t *testing.T) (*x509.Certificate, *rsa.PrivateKey)
• func WritePKIFiles(t *testing.T, dir string, files PKIFiles)
• type CertTestCase
  • func GetSparseCertTestCases(t *testing.T) []CertTestCase
• type PKIFiles

Functions

func AssertCertificateHasClientAuthUsage

func AssertCertificateHasClientAuthUsage(t *testing.T, cert *x509.Certificate)

AssertCertificateHasClientAuthUsage is a utility function for kubeadm testing that asserts if a given certificate has the expected ExtKeyUsageClientAuth

func AssertCertificateHasCommonName

func AssertCertificateHasCommonName(t *testing.T, cert *x509.Certificate, commonName string)

AssertCertificateHasCommonName is a utility function for kubeadm testing that asserts if a given certificate has the expected SubjectCommonName

func AssertCertificateHasDNSNames

func AssertCertificateHasDNSNames(t *testing.T, cert *x509.Certificate, DNSNames ...string)

AssertCertificateHasDNSNames is a utility function for kubeadm testing that asserts if a given certificate has the expected DNSNames

func AssertCertificateHasIPAddresses

func AssertCertificateHasIPAddresses(t *testing.T, cert *x509.Certificate, IPAddresses ...net.IP)

AssertCertificateHasIPAddresses is a utility function for kubeadm testing that asserts if a given certificate has the expected IPAddresses

func AssertCertificateHasOrganizations

func AssertCertificateHasOrganizations(t *testing.T, cert *x509.Certificate, organizations ...string)

AssertCertificateHasOrganizations is a utility function for kubeadm testing that asserts if a given certificate has the expected Subject.Organization

func AssertCertificateHasServerAuthUsage

func AssertCertificateHasServerAuthUsage(t *testing.T, cert *x509.Certificate)

AssertCertificateHasServerAuthUsage is a utility function for kubeadm testing that asserts if a given certificate has the expected ExtKeyUsageServerAuth

func AssertCertificateIsCa

func AssertCertificateIsCa(t *testing.T, cert *x509.Certificate)

AssertCertificateIsCa is a utility function for kubeadm testing that asserts if a given certificate is a CA

func AssertCertificateIsSignedByCa

func AssertCertificateIsSignedByCa(t *testing.T, cert *x509.Certificate, signingCa *x509.Certificate)

AssertCertificateIsSignedByCa is a utility function for kubeadm testing that asserts if a given certificate is signed by the expected CA

func CreateCACert

func CreateCACert(t *testing.T) (*x509.Certificate, *rsa.PrivateKey)

CreateCACert creates a generic CA cert.

func CreateTestCert

func CreateTestCert(t *testing.T, caCert *x509.Certificate, caKey *rsa.PrivateKey, altNames certutil.AltNames) (*x509.Certificate, *rsa.PrivateKey, *certutil.Config)

CreateTestCert makes a generic certificate with the given CA and alternative names.

func SetupCertificateAuthorithy

func SetupCertificateAuthorithy(t *testing.T) (*x509.Certificate, *rsa.PrivateKey)

SetupCertificateAuthorithy is a utility function for kubeadm testing that creates a CertificateAuthorithy cert/key pair

func WritePKIFiles

func WritePKIFiles(t *testing.T, dir string, files PKIFiles)

WritePKIFiles writes the given files out to the given directory

Types

type CertTestCase

type CertTestCase struct {
	Name        string
	Files       PKIFiles
	ExpectError bool
}

CertTestCase is a configuration of certificates and whether it's expected to work.

func GetSparseCertTestCases

func GetSparseCertTestCases(t *testing.T) []CertTestCase

GetSparseCertTestCases produces a series of cert configurations and their intended outcomes.

type PKIFiles

type PKIFiles map[string]interface{}

PKIFiles are a list of files that should be created for a test case