pkiverifier

Documentation

Index

• type DatapathKey
• type PKITokenIssuer
  • func NewPKIIssuer(privateKey *ecdsa.PrivateKey) PKITokenIssuer
• type PKITokenVerifier
  • func NewPKIVerifier(publicKeys []*ecdsa.PublicKey, cacheValidity time.Duration) PKITokenVerifier

Types

type DatapathKey

type DatapathKey struct {
	PublicKey  *ecdsa.PublicKey
	Tags       []string
	Expiration time.Time
}

DatapathKey holds the data path key with the corresponding claims.

type PKITokenIssuer

type PKITokenIssuer interface {
	CreateTokenFromCertificate(*x509.Certificate, []string) ([]byte, error)
}

PKITokenIssuer is the interface of an object that can issue a PKI token.

func NewPKIIssuer

func NewPKIIssuer(privateKey *ecdsa.PrivateKey) PKITokenIssuer

NewPKIIssuer initializes a new signer structure

type PKITokenVerifier

type PKITokenVerifier interface {
	Verify([]byte) (*DatapathKey, error)
}

PKITokenVerifier is the interface of an object that can verify a PKI token.

func NewPKIVerifier

func NewPKIVerifier(publicKeys []*ecdsa.PublicKey, cacheValidity time.Duration) PKITokenVerifier

NewPKIVerifier returns a new PKIConfiguration.