certs

Documentation

Index

• Variables
• func GetConfig(certPEM, keyPEM []byte) (*tls.Config, error)
• func NewTLSTemplate() (*x509.Certificate, error)
• type Installer
  • func NewInstaller() *Installer
  • func (installer *Installer) InstallCert(certPEM []byte) error
  • func (installer *Installer) IsCertInstalled(certPEM []byte) bool
  • func (installer *Installer) LogCertInstallStatus(certPEM []byte)
  • func (installer *Installer) OSSupportCertInstall() bool
  • func (installer *Installer) UninstallCert(certPEM []byte) error

Variables

var ErrTLSCertExpiresSoon = fmt.Errorf("TLS certificate will expire soon")

ErrTLSCertExpiresSoon is returned when the TLS certificate is about to expire.

var (
	ErrUserCanceledCertificateInstall = errors.New("the user cancelled the authorization dialog")
)

var GenerateCert = func(template *x509.Certificate) ([]byte, []byte, error) {
	priv, err := rsa.GenerateKey(rand.Reader, 2048)
	if err != nil {
		return nil, nil, errors.Wrap(err, "failed to generate private key")
	}

	derBytes, err := x509.CreateCertificate(rand.Reader, template, template, &priv.PublicKey, priv)
	if err != nil {
		return nil, nil, errors.Wrap(err, "failed to create certificate")
	}

	certPEM := new(bytes.Buffer)

	if err := pem.Encode(certPEM, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes}); err != nil {
		return nil, nil, err
	}

	keyPEM := new(bytes.Buffer)

	if err := pem.Encode(keyPEM, &pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)}); err != nil {
		return nil, nil, err
	}

	return certPEM.Bytes(), keyPEM.Bytes(), nil
}

GenerateCert generates a new TLS certificate and returns it as PEM.

Functions

func GetConfig

func GetConfig(certPEM, keyPEM []byte) (*tls.Config, error)

GetConfig tries to load TLS config or generate new one which is then returned.

func NewTLSTemplate

func NewTLSTemplate() (*x509.Certificate, error)

NewTLSTemplate creates a new TLS template certificate with a random serial number.

Types

type Installer

type Installer struct {
	// contains filtered or unexported fields
}

func NewInstaller

func NewInstaller() *Installer

func (*Installer) InstallCert

func (installer *Installer) InstallCert(certPEM []byte) error

func (*Installer) IsCertInstalled

func (installer *Installer) IsCertInstalled(certPEM []byte) bool

func (*Installer) LogCertInstallStatus

func (installer *Installer) LogCertInstallStatus(certPEM []byte)

LogCertInstallStatus reports the current status of the certificate installation in the log. If certificate installation is not supported on the platform, this function does nothing.

func (*Installer) OSSupportCertInstall

func (installer *Installer) OSSupportCertInstall() bool

func (*Installer) UninstallCert

func (installer *Installer) UninstallCert(certPEM []byte) error