cert

Documentation

Index

• Variables
• func NewDefaultServer(caCertPEM, caKeyPEM string, hostnames []string) (certPEM, keyPEM string, err error)
• func NewServer(caCertPEM, caKeyPEM string, expiry time.Time, hostnames []string) (certPEM, keyPEM string, err error)
• func Verify(srvCertPEM, caCertPEM string, when time.Time) error

Variables

var NewCA = newCA

NewCA generates a CA certificate/key pair suitable for signing server keys for an environment with the given name. wrapper arount utils/cert#NewCA

var NewLeafKeyBits = 2048

NewLeafKeyBits is the number of bits used for the cert.NewLeaf call.

Functions

func NewDefaultServer

func NewDefaultServer(caCertPEM, caKeyPEM string, hostnames []string) (certPEM, keyPEM string, err error)

NewDefaultServer generates a certificate/key pair suitable for use by a server, with an expiry time of 10 years.

func NewServer

func NewServer(caCertPEM, caKeyPEM string, expiry time.Time, hostnames []string) (certPEM, keyPEM string, err error)

NewServer generates a certificate/key pair suitable for use by a server.

func Verify

func Verify(srvCertPEM, caCertPEM string, when time.Time) error

Verify verifies that the given server certificate is valid with respect to the given CA certificate at the given time.