afssl

README

AFSSL

SSL Generator.

Install

go get github.com/aacfactory/afssl

Usage

Generate Self Signed SSL.

config := afssl.CertificateConfig{
    Country:            "CN",
    Province:           "Shanghai",
    City:               "Shanghai",
    Organization:       "AACFACTORY",
    OrganizationalUnit: "TECH",
    CommonName:         "AFSSL",
    IPs:                nil,
    Emails:             nil,
    DNSNames:           nil,
}
// ca
caPEM, caKeyPEM, caErr := afssl.GenerateCertificate(config, afssl.CA())
if caErr != nil {
    t.Error("ca", caErr)
    return
}
fmt.Println(string(caPEM))
fmt.Println(string(caKeyPEM))
// server
serverPEM, serverKeyPEM, serverErr := afssl.GenerateCertificate(config, afssl.WithParent(caPEM, caKeyPEM))
if serverErr != nil {
    t.Error("server", serverErr)
    return
}
fmt.Println(string(serverPEM))
fmt.Println(string(serverKeyPEM))
// client
clientPEM, clientKeyPEM, clientErr := afssl.GenerateCertificate(config, afssl.WithParent(caPEM, caKeyPEM))
if clientErr != nil {
    t.Error("client", clientErr)
    return
}
fmt.Println(string(clientPEM))
fmt.Println(string(clientKeyPEM))

Generate *tls.Config via ACME. More DNS providers is HERE . Support Automatic RENEW. Thanks to LEGO.

os.Setenv("ALICLOUD_ACCESS_KEY", "your aliyun access key")
os.Setenv("ALICLOUD_SECRET_KEY", "your aliyun sercet key")
acme, acmeErr := afssl.NewAcme("foo@bar.com", "alidns", []string{"*.foo.bar"})
if acmeErr != nil {
    t.Error(acmeErr)
    return
}
config, obtainErr := acme.Obtain()
if obtainErr != nil {
    t.Error(obtainErr)
    return
}

Documentation

Index

• func GenerateCertificate(config CertificateConfig, opts ...GenerateCertificateOption) (certPEM []byte, keyPEM []byte, err error)
• type Acme
  • func NewAcme(email string, dnsProvider string, domains []string, opts ...AcmeOption) (v Acme, err error)
• type AcmeLogger
• type AcmeOption
  • func AcmeRequestCertificateTimeout(v time.Duration) AcmeOption
  • func CustomizeAcmeLogger(v AcmeLogger) AcmeOption
• type AcmeOptions
• type CertificateConfig
• type GenerateCertificateOption
  • func CA() GenerateCertificateOption
  • func WithExpirationDays(days int) GenerateCertificateOption
  • func WithParent(certPEM []byte, keyPEM []byte) GenerateCertificateOption
  • func WithSerialNumber(sn uint64) GenerateCertificateOption
• type GenerateCertificateOptions

Functions

func GenerateCertificate

func GenerateCertificate(config CertificateConfig, opts ...GenerateCertificateOption) (certPEM []byte, keyPEM []byte, err error)

Types

type Acme

type Acme interface {
	Obtain() (config *tls.Config, err error)
	Close()
}

func NewAcme

func NewAcme(email string, dnsProvider string, domains []string, opts ...AcmeOption) (v Acme, err error)

type AcmeLogger

type AcmeLogger interface {
	Fatal(args ...interface{})
	Fatalln(args ...interface{})
	Fatalf(format string, args ...interface{})
	Print(args ...interface{})
	Println(args ...interface{})
	Printf(format string, args ...interface{})
}

type AcmeOption

type AcmeOption func(*AcmeOptions) error

func AcmeRequestCertificateTimeout

func AcmeRequestCertificateTimeout(v time.Duration) AcmeOption

func CustomizeAcmeLogger

func CustomizeAcmeLogger(v AcmeLogger) AcmeOption

type AcmeOptions

type AcmeOptions struct {
	RequestCertificateTimeout time.Duration
	Log                       AcmeLogger
}

type CertificateConfig

type CertificateConfig struct {
	Country            string
	Province           string
	City               string
	Organization       string
	OrganizationalUnit string
	CommonName         string
	IPs                []string
	Emails             []string
	DNSNames           []string
}

type GenerateCertificateOption

type GenerateCertificateOption func(*GenerateCertificateOptions) error

func CA

func CA() GenerateCertificateOption

func WithExpirationDays

func WithExpirationDays(days int) GenerateCertificateOption

func WithParent

func WithParent(certPEM []byte, keyPEM []byte) GenerateCertificateOption

func WithSerialNumber

func WithSerialNumber(sn uint64) GenerateCertificateOption

type GenerateCertificateOptions

type GenerateCertificateOptions struct {
	// contains filtered or unexported fields
}