tpmmodule

Documentation

Index

• Variables
• func New(certType string, configJSON json.RawMessage) (module certhandler.CertModule, err error)
• type TPMModule
  • func (module *TPMModule) ApplyCertificate(x509Certs []*x509.Certificate) (certInfo certhandler.CertInfo, password string, err error)
  • func (module *TPMModule) Clear() (err error)
  • func (module *TPMModule) Close() (err error)
  • func (module *TPMModule) CreateKey(password, algorithm string) (key crypto.PrivateKey, err error)
  • func (module *TPMModule) RemoveCertificate(certURL, password string) (err error)
  • func (module *TPMModule) RemoveKey(keyURL, password string) (err error)
  • func (module *TPMModule) SetOwner(password string) (err error)
  • func (module *TPMModule) ValidateCertificates() (validInfos []certhandler.CertInfo, invalidCerts, invalidKeys []string, ...)

Variables

var DefaultTPMDevice io.ReadWriteCloser //nolint:gochecknoglobals

DefaultTPMDevice used if not specified in the config.

Functions

func New

func New(certType string, configJSON json.RawMessage) (module certhandler.CertModule, err error)

New creates ssh module instance.

Types

type TPMModule

type TPMModule struct {
	// contains filtered or unexported fields
}

TPMModule TPM certificate module.

func (*TPMModule) ApplyCertificate

func (module *TPMModule) ApplyCertificate(x509Certs []*x509.Certificate) (
	certInfo certhandler.CertInfo, password string, err error,
)

ApplyCertificate applies certificate.

func (*TPMModule) Clear

func (module *TPMModule) Clear() (err error)

Clear clears security storage.

func (*TPMModule) Close

func (module *TPMModule) Close() (err error)

Close closes TPM module.

func (*TPMModule) CreateKey

func (module *TPMModule) CreateKey(password, algorithm string) (key crypto.PrivateKey, err error)

CreateKey creates key pair.

func (*TPMModule) RemoveCertificate

func (module *TPMModule) RemoveCertificate(certURL, password string) (err error)

RemoveCertificate removes certificate.

func (*TPMModule) RemoveKey

func (module *TPMModule) RemoveKey(keyURL, password string) (err error)

RemoveKey removes key.

func (*TPMModule) SetOwner

func (module *TPMModule) SetOwner(password string) (err error)

SetOwner owns security storage.

func (*TPMModule) ValidateCertificates

func (module *TPMModule) ValidateCertificates() (
	validInfos []certhandler.CertInfo, invalidCerts, invalidKeys []string, err error,
)

ValidateCertificates returns list of valid pairs, invalid certificates and invalid keys.