aws_signing_helper

Dec 10, 2024

Changes in this version

type TPMv2Signer — windows/amd64

+ func (tpmv2Signer *TPMv2Signer) Certificate() (*x509.Certificate, error)

+ func (tpmv2Signer *TPMv2Signer) CertificateChain() (chain []*x509.Certificate, err error)

+ func (tpmv2Signer *TPMv2Signer) Close()

+ func (tpmv2Signer *TPMv2Signer) Public() crypto.PublicKey

+ func (tpmv2Signer *TPMv2Signer) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) (signature []byte, err error)

Nov 11, 2024

Changes in this version

+ var TPM_RC_AUTH_FAIL = "0x22"

+ func PasswordPrompt(passwordPromptInput PasswordPromptProps) (string, interface{}, error)

+ func RunNegativeSignTestWithTestTable(t *testing.T, testTable []CredentialsOpts)

+ func RunSignTestWithTestTable(t *testing.T, testTable []CredentialsOpts)

+ func Verify(payload []byte, publicKey crypto.PublicKey, digest crypto.Hash, sig []byte) (bool, error)

type CredentialsOpts

+ NoTpmKeyPassword bool

+ TpmKeyPassword string

+ type GetTPMv2SignerOpts struct

+ type PasswordPromptProps struct

+ CheckPassword func(string) (interface{}, error)

+ CheckPasswordAuthorizationErrorMsg string

+ IncorrectPasswordMsg string

+ InitialPassword string

+ NoPassword bool

+ ParseErrMsg string

+ Prompt string

+ Reprompt string

type Signer

+ func GetTPMv2Signer(opts GetTPMv2SignerOpts) (signer Signer, signingAlgorithm string, err error)

+ type TPMv2Signer struct

+ func (tpmv2Signer *TPMv2Signer) Certificate() (*x509.Certificate, error)

+ func (tpmv2Signer *TPMv2Signer) CertificateChain() (chain []*x509.Certificate, err error)

+ func (tpmv2Signer *TPMv2Signer) Close()

+ func (tpmv2Signer *TPMv2Signer) Public() crypto.PublicKey

+ func (tpmv2Signer *TPMv2Signer) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) (signature []byte, err error)

Aug 22, 2024

Changes in this version

+ const DefaultHopLimit

+ func GetCertChain(certificateBundleId string) ([]*x509.Certificate, error)

+ func NewListenerWithTTL(l net.Listener, ttl int) net.Listener

type CredentialsOpts

+ RoleSessionName string

+ ServerTTL int

Oct 12, 2023

Changes in this version

+ const NTE_SILENT_CONTEXT — windows/amd64

+ var ErrRequiresUI = errors.New("provider requries UI to operate") — windows/amd64

+ var SystemStoreNames = []string

type CertIdentifier

+ SystemStoreName string

Sep 20, 2023

Changes in this version

+ var MAX_OBJECT_LIMIT int = 1000

+ var PKCS11_TEST_VERSION int16 = 1

+ func GetPassword(ttyReadFile *os.File, ttyWriteFile *os.File, prompt string, parseErrMsg string) (string, error)

+ func ReadPKCS12Data(certificateId string) (certChain []*x509.Certificate, privateKey crypto.PrivateKey, err error)

+ func ReadPrivateKeyDataFromPEMBlock(block *pem.Block) (key crypto.PrivateKey, err error)

+ type CertObjInfo struct

type CertificateContainer

+ func GetMatchingPKCSCerts(uriStr string, lib string) (matchingCerts []CertificateContainer, err error)

type CredentialsOpts

+ ReusePin bool

+ type KeyObjInfo struct

+ type PKCS11Signer struct

+ func (pkcs11Signer *PKCS11Signer) Certificate() (cert *x509.Certificate, err error)

+ func (pkcs11Signer *PKCS11Signer) CertificateChain() (certChain []*x509.Certificate, err error)

+ func (pkcs11Signer *PKCS11Signer) Close()

+ func (pkcs11Signer *PKCS11Signer) Public() crypto.PublicKey

+ func (pkcs11Signer *PKCS11Signer) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) (signature []byte, err error)

type Signer

+ func GetPKCS11Signer(libPkcs11 string, cert *x509.Certificate, certChain []*x509.Certificate, ...) (signer Signer, signingAlgorithm string, err error)

+ type SlotIdInfo struct

Jul 25, 2023

Changes in this version

+ const BufferSize

+ const ERROR_SUCCESS — windows/amd64

+ const NTE_BAD_ALGID — windows/amd64

+ const WIN_API_FLAG — windows/amd64

+ const WIN_FALSE — windows/amd64

+ var Debug bool = false

+ var ErrUnsupportedHash = errors.New("unsupported hash algorithm")

+ func CreateRequestSignFunction(signer crypto.Signer, signingAlgorithm string, certificate *x509.Certificate, ...) func(*request.Request)

+ func GetNewCredentialsFileContents(profileName string, readLines []string, cred *TemporaryCredential) []string

+ type CertIdentifier struct

+ Issuer string

+ SerialNumber *big.Int

+ Subject string

+ type CertificateContainer struct

+ Cert *x509.Certificate

+ Uri string

+ func GetMatchingCerts(certIdentifier CertIdentifier) ([]CertificateContainer, error)

+ func GetMatchingCertsAndChain(certIdentifier CertIdentifier) (store windows.Handle, certCtx *windows.CertContext, ...)

+ func GetMatchingCertsAndIdentity(certIdentifier CertIdentifier) (C.SecIdentityRef, C.SecCertificateRef, []CertificateContainer, error)

type CredentialsOpts

+ CertIdentifier CertIdentifier

+ LibPkcs11 string

+ type DarwinCertStoreSigner struct — darwin/amd64

+ func (signer *DarwinCertStoreSigner) Certificate() (*x509.Certificate, error)

+ func (signer *DarwinCertStoreSigner) CertificateChain() ([]*x509.Certificate, error)

+ func (signer *DarwinCertStoreSigner) Close()

+ func (signer *DarwinCertStoreSigner) Public() crypto.PublicKey

+ func (signer *DarwinCertStoreSigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

+ type FileSystemSigner struct

+ PrivateKey crypto.PrivateKey

+ func (fileSystemSigner FileSystemSigner) Certificate() (*x509.Certificate, error)

+ func (fileSystemSigner FileSystemSigner) CertificateChain() ([]*x509.Certificate, error)

+ func (fileSystemSigner FileSystemSigner) Close()

+ func (fileSystemSigner FileSystemSigner) Public() crypto.PublicKey

+ func (fileSystemSigner FileSystemSigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) (signature []byte, err error)

type Signer

+ func GetCertStoreSigner(certIdentifier CertIdentifier) (signer Signer, signingAlgorithm string, err error)

+ func GetFileSystemSigner(privateKey crypto.PrivateKey, certificate *x509.Certificate, ...) (signer Signer, signingAlgorithm string, err error)

+ func GetPKCS12Signer(certificateId string) (signer Signer, signingAlgorithm string, err error)

+ func GetSigner(opts *CredentialsOpts) (signer Signer, signatureAlgorithm string, err error)

+ Certificate func() (certificate *x509.Certificate, err error)

+ CertificateChain func() (certificateChain []*x509.Certificate, err error)

+ Close func()

+ Public func() crypto.PublicKey

+ type WindowsCertStoreSigner struct — windows/amd64

+ func (signer *WindowsCertStoreSigner) Certificate() (cert *x509.Certificate, err error)

+ func (signer *WindowsCertStoreSigner) CertificateChain() ([]*x509.Certificate, error)

+ func (signer *WindowsCertStoreSigner) Close()

+ func (signer *WindowsCertStoreSigner) Public() crypto.PublicKey

+ func (signer *WindowsCertStoreSigner) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)

Jan 17, 2023

Changes in this version

+ const REFRESHABLE_CRED_CODE

+ const REFRESHABLE_CRED_TYPE

+ func FindTokenTTLSeconds(r *http.Request) (string, error)

type RefreshableCred

+ Code string

+ LastUpdated time.Time

+ Type string

Dec 5, 2022

Changes in this version

+ const AwsSharedCredentialsFileEnvVarName

+ const DEFAULT_TOKEN_TTL_SECONDS

+ const DefaultPort

+ const EC2_METADATA_TOKEN_HEADER

+ const EC2_METADATA_TOKEN_TTL_HEADER

+ const LocalHostAddress

+ const MAX_TOKENS

+ const SECURITY_CREDENTIALS_RESOURCE_PATH

+ const TOKEN_RESOURCE_PATH

+ const UpdateRefreshTime

+ const X_FORWARDED_FOR_HEADER

+ var RefreshTime = time.Minute * time.Duration(5)

+ func AllIssuesHandlers(cred *RefreshableCred, roleName string, opts *CredentialsOpts) (http.HandlerFunc, http.HandlerFunc, http.HandlerFunc)

+ func CheckValidToken(w http.ResponseWriter, r *http.Request) error

+ func GenerateToken(length int) (string, error)

+ func GetCredentialsFileContents() ([]string, error)

+ func GetWriteOnlyCredentialsFile() (*os.File, error)

+ func InsertToken(token string, expirationTime time.Time) error

+ func Serve(port int, credentialsOptions CredentialsOpts)

+ func Update(credentialsOptions CredentialsOpts, profile string, once bool)

+ func WriteTo(profileName string, writeLines []string, cred *TemporaryCredential) error

+ type Endpoint struct

+ PortNum int

+ Server *http.Server

+ TmpCred RefreshableCred

+ type RefreshableCred struct

+ AccessKeyId string

+ Expiration time.Time

+ SecretAccessKey string

+ Token string

+ type SessionToken struct

+ Expiration time.Time

+ type TemporaryCredential struct

+ AccessKeyId string

+ Expiration time.Time

+ SecretAccessKey string

+ SessionToken string

Sep 16, 2022

Changes in this version

+ func BuildAuthorizationHeader(request *http.Request, body io.ReadSeeker, signedHeadersString string, ...) string

+ func CreateSignFunction(privateKey crypto.PrivateKey, certificate x509.Certificate, ...) func(*request.Request)

+ func CreateStringToSign(canonicalRequest string, signerParams SignerParams) string

+ func ReadCertificateBundleData(certificateBundleId string) ([]*x509.Certificate, error)

+ func ReadPrivateKeyData(privateKeyId string) (crypto.PrivateKey, error)

+ type CertificateData struct

+ Algorithms []string

+ CertificateData string

+ KeyType string

+ SerialNumber string

+ func ReadCertificateData(certificateId string) (CertificateData, error)

+ type CredentialProcessOutput struct

+ AccessKeyId string

+ Expiration string

+ SecretAccessKey string

+ SessionToken string

+ Version int

+ func GenerateCredentials(opts *CredentialsOpts) (CredentialProcessOutput, error)

+ type CredentialsOpts struct

+ CertificateBundleId string

+ CertificateId string

+ Debug bool

+ Endpoint string

+ NoVerifySSL bool

+ PrivateKeyId string

+ ProfileArnStr string

+ Region string

+ RoleArn string

+ SessionDuration int

+ TrustAnchorArnStr string

+ Version string

+ WithProxy bool

+ type RequestHeaderOpts struct

+ CertificateData string

+ type RequestOpts struct

+ CertificateData string

+ ConfigurationArn string

+ DurationSeconds int

+ RoleArn string

+ type RequestQueryStringOpts struct

+ ConfigurationArn string

+ RoleArn string

+ type RolesAnywhereSigner struct

+ Certificate x509.Certificate

+ CertificateChain []x509.Certificate

+ PrivateKey crypto.PrivateKey

+ func (v4x509 RolesAnywhereSigner) SignWithCurrTime(req *request.Request) error

+ type Signer interface

+ Sign func(r *http.Request, body io.ReadSeeker, service, region string, ...) (http.Header, error)

+ type SignerParams struct

+ OverriddenDate time.Time

+ RegionName string

+ ServiceName string

+ SigningAlgorithm string

+ func (signerParams *SignerParams) GetFormattedShortSigningDateTime() string

+ func (signerParams *SignerParams) GetFormattedSigningDateTime() string

+ func (signerParams *SignerParams) GetScope() string

+ type SigningOpts struct

+ Digest crypto.Hash

+ PrivateKey crypto.PrivateKey

+ type SigningResult struct

+ Signature string

+ func Sign(payload []byte, opts SigningOpts) (SigningResult, error)