tinyca

Documentation

Overview

Package tinyca implements a Certificate Authority that issues certificates for client authentication.

Index

• type CA
  • func New(ns uuid.UUID, crt *x509.Certificate, key *ecdsa.PrivateKey, dur time.Duration) CA
  • func (ca CA) IssueCertificate(csr *x509.CertificateRequest) ([]byte, error)
  • func (ca CA) ServeHTTP(w http.ResponseWriter, r *http.Request)
  • func (ca CA) String() string

Types

type CA

type CA struct {
	// contains filtered or unexported fields
}

CA is a simple Certificate Authority. The only supported operation is to issue client certificates. Client certificates are signed by the configured root certificate and private key.

func New

func New(ns uuid.UUID, crt *x509.Certificate, key *ecdsa.PrivateKey, dur time.Duration) CA

New returns a new CA. The CA issues certificates for the given namespace.

func (CA) IssueCertificate

func (ca CA) IssueCertificate(csr *x509.CertificateRequest) ([]byte, error)

IssueCertificate issues a client certificate for the given CSR. The client ID is the UUID of the client public key.

func (CA) ServeHTTP

func (ca CA) ServeHTTP(w http.ResponseWriter, r *http.Request)

ServeHTTP issues a certificate if a valid certificate request is read from the request.

Requests carrying a content-type of "text/plain" should have a PEM encoded certificate request. Requests carrying a content-type of "application/octet-stream" should submit the ASN.1 DER encoded form instead.

func (CA) String

func (ca CA) String() string