csr

Documentation

Overview

Package csr implements certificate requests for CFSSL.

Index

• func IsNameEmpty(n Name) bool
• func ParseRequest(req *CertificateRequest) (csr, key []byte, err error)
• type BasicKeyRequest
  • func NewBasicKeyRequest() *BasicKeyRequest
  • func (kr *BasicKeyRequest) Algo() string
  • func (kr *BasicKeyRequest) Generate() (crypto.PrivateKey, error)
  • func (kr *BasicKeyRequest) SigAlgo() x509.SignatureAlgorithm
  • func (kr *BasicKeyRequest) Size() int
• type CAConfig
• type CertificateRequest
  • func (cr *CertificateRequest) Name() pkix.Name
• type Generator
  • func (g *Generator) ProcessRequest(req *CertificateRequest) (csr, key []byte, err error)
• type KeyRequest
• type Name

Functions

func IsNameEmpty

func IsNameEmpty(n Name) bool

IsNameEmpty returns true if the name has no identifying information in it.

func ParseRequest

func ParseRequest(req *CertificateRequest) (csr, key []byte, err error)

ParseRequest takes a certificate request and generates a key and CSR from it. It does no validation -- caveat emptor. It will, however, fail if the key request is not valid (i.e., an unsupported curve or RSA key size). The lack of validation was specifically chosen to allow the end user to define a policy and validate the request appropriately before calling this function.

Types

type BasicKeyRequest

type BasicKeyRequest struct {
	A string `json:"algo"`
	S int    `json:"size"`
}

A BasicKeyRequest contains the algorithm and key size for a new private key.

func NewBasicKeyRequest

func NewBasicKeyRequest() *BasicKeyRequest

NewBasicKeyRequest returns a default BasicKeyRequest.

func (*BasicKeyRequest) Algo

func (kr *BasicKeyRequest) Algo() string

Algo returns the requested key algorithm represented as a string.

func (*BasicKeyRequest) Generate

func (kr *BasicKeyRequest) Generate() (crypto.PrivateKey, error)

Generate generates a key as specified in the request. Currently, only ECDSA and RSA are supported.

func (*BasicKeyRequest) SigAlgo

func (kr *BasicKeyRequest) SigAlgo() x509.SignatureAlgorithm

SigAlgo returns an appropriate X.509 signature algorithm given the key request's type and size.

func (*BasicKeyRequest) Size

func (kr *BasicKeyRequest) Size() int

Size returns the requested key size.

type CAConfig

type CAConfig struct {
	PathLength int    `json:"pathlen"`
	Expiry     string `json:"expiry"`
}

CAConfig is a section used in the requests initialising a new CA.

type CertificateRequest

type CertificateRequest struct {
	CN         string
	Names      []Name     `json:"names"`
	Hosts      []string   `json:"hosts"`
	KeyRequest KeyRequest `json:"key,omitempty"`
	CA         *CAConfig  `json:"ca,omitempty"`
}

A CertificateRequest encapsulates the API interface to the certificate request functionality.

func (*CertificateRequest) Name

func (cr *CertificateRequest) Name() pkix.Name

Name returns the PKIX name for the request.

type Generator

type Generator struct {
	Validator func(*CertificateRequest) error
}

A Generator is responsible for validating certificate requests.

func (*Generator) ProcessRequest

func (g *Generator) ProcessRequest(req *CertificateRequest) (csr, key []byte, err error)

ProcessRequest validates and processes the incoming request. It is a wrapper around a validator and the ParseRequest function.

type KeyRequest

type KeyRequest interface {
	Algo() string
	Size() int
	Generate() (crypto.PrivateKey, error)
	SigAlgo() x509.SignatureAlgorithm
}

A KeyRequest is a generic request for a new key.

type Name

type Name struct {
	C  string // Country
	ST string // State
	L  string // Locality
	O  string // OrganisationName
	OU string // OrganisationalUnitName
}

A Name contains the SubjectInfo fields.