Documentation ¶
Index ¶
- Variables
- func CBCDecrypt(key, src []byte) ([]byte, error)
- func CBCEncrypt(key, s []byte) ([]byte, error)
- func GetConfigInt(name string) int
- func GetConfigString(name string) string
- func LogInit(trace, info, warning, error, panic io.Writer)
- func PKCS5Pad(src []byte) []byte
- func PKCS5Unpad(src []byte) []byte
- type CA
- type ECA
- type ECAA
- func (ecaa *ECAA) PublishCRL(context.Context, *pb.ECertCRLReq) (*pb.CAStatus, error)
- func (ecaa *ECAA) ReadUserSet(ctx context.Context, in *pb.ReadUserSetReq) (*pb.UserSet, error)
- func (ecaa *ECAA) RegisterUser(ctx context.Context, in *pb.RegisterUserReq) (*pb.Token, error)
- func (ecaa *ECAA) RevokeCertificate(context.Context, *pb.ECertRevokeReq) (*pb.CAStatus, error)
- type ECAP
- func (ecap *ECAP) CreateCertificatePair(ctx context.Context, in *pb.ECertCreateReq) (*pb.ECertCreateResp, error)
- func (ecap *ECAP) ReadCACertificate(ctx context.Context, in *pb.Empty) (*pb.Cert, error)
- func (ecap *ECAP) ReadCertificateByHash(ctx context.Context, hash *pb.Hash) (*pb.Cert, error)
- func (ecap *ECAP) ReadCertificatePair(ctx context.Context, in *pb.ECertReadReq) (*pb.CertPair, error)
- func (ecap *ECAP) RevokeCertificatePair(context.Context, *pb.ECertRevokeReq) (*pb.CAStatus, error)
- type TCA
- type TCAA
- func (tcaa *TCAA) PublishCRL(context.Context, *pb.TCertCRLReq) (*pb.CAStatus, error)
- func (tcaa *TCAA) ReadCertificateSets(ctx context.Context, in *pb.TCertReadSetsReq) (*pb.CertSets, error)
- func (tcaa *TCAA) RevokeCertificate(context.Context, *pb.TCertRevokeReq) (*pb.CAStatus, error)
- func (tcaa *TCAA) RevokeCertificateSet(context.Context, *pb.TCertRevokeSetReq) (*pb.CAStatus, error)
- type TCAP
- func (tcap *TCAP) CreateCertificate(ctx context.Context, in *pb.TCertCreateReq) (*pb.TCertCreateResp, error)
- func (tcap *TCAP) CreateCertificateSet(ctx context.Context, in *pb.TCertCreateSetReq) (*pb.TCertCreateSetResp, error)
- func (tcap *TCAP) ReadCACertificate(ctx context.Context, in *pb.Empty) (*pb.Cert, error)
- func (tcap *TCAP) ReadCertificate(ctx context.Context, in *pb.TCertReadReq) (*pb.Cert, error)
- func (tcap *TCAP) ReadCertificateSet(ctx context.Context, in *pb.TCertReadSetReq) (*pb.CertSet, error)
- func (tcap *TCAP) RevokeCertificate(context.Context, *pb.TCertRevokeReq) (*pb.CAStatus, error)
- func (tcap *TCAP) RevokeCertificateSet(context.Context, *pb.TCertRevokeSetReq) (*pb.CAStatus, error)
- type TLSCA
- type TLSCAA
- type TLSCAP
- func (tlscap *TLSCAP) CreateCertificate(ctx context.Context, in *pb.TLSCertCreateReq) (*pb.TLSCertCreateResp, error)
- func (tlscap *TLSCAP) ReadCACertificate(ctx context.Context, in *pb.Empty) (*pb.Cert, error)
- func (tlscap *TLSCAP) ReadCertificate(ctx context.Context, in *pb.TLSCertReadReq) (*pb.Cert, error)
- func (tlscap *TLSCAP) RevokeCertificate(context.Context, *pb.TLSCertRevokeReq) (*pb.CAStatus, error)
Constants ¶
This section is empty.
Variables ¶
var ( // Trace is a trace logger. Trace *log.Logger // Info is an info logger. Info *log.Logger // Warning is a warning logger. Warning *log.Logger // Error is an error logger. Error *log.Logger // Panic is a panic logger. Panic *log.Logger )
var ( // ECertSubjectRole is the ASN1 object identifier of the subject's role. // ECertSubjectRole = asn1.ObjectIdentifier{2, 1, 3, 4, 5, 6, 7} )
var ( // TCertEncTCertIndex is the ASN1 object identifier of the TCert index. // TCertEncTCertIndex = asn1.ObjectIdentifier{1, 2, 3, 4, 5, 6, 7} )
Functions ¶
func CBCDecrypt ¶
CBCDecrypt performs an AES CBC decryption.
func CBCEncrypt ¶
CBCEncrypt performs an AES CBC encryption.
func GetConfigInt ¶
GetConfigInt returns a configuration integer value for a given identifier. Environment variables have preference over entries in the yaml file, whereby 'name' is converted to
"OBCCA_" + strings.Replace(strings.ToUpper('name'), ".", "_")
for environment variables.
func GetConfigString ¶
GetConfigString returns a configuration string value for a given identifier. Environment variables have preference over entries in the yaml file, whereby 'name' is converted to
"OBCCA_" + strings.Replace(strings.ToUpper('name'), ".", "_")
for environment variables.
Types ¶
type CA ¶
type CA struct {
// contains filtered or unexported fields
}
CA is the base certificate authority.
type ECA ¶
type ECA struct { *CA // contains filtered or unexported fields }
ECA is the enrollment certificate authority.
type ECAA ¶
type ECAA struct {
// contains filtered or unexported fields
}
ECAA serves the administrator GRPC interface of the ECA.
func (*ECAA) PublishCRL ¶
PublishCRL requests the creation of a certificate revocation list from the ECA. Not yet implemented.
func (*ECAA) ReadUserSet ¶
ReadUserSet returns a list of users matching the parameters set in the read request.
func (*ECAA) RegisterUser ¶
RegisterUser registers a new user with the ECA. If the user had been registered before an error is returned.
func (*ECAA) RevokeCertificate ¶
RevokeCertificate revokes a certificate from the ECA. Not yet implemented.
type ECAP ¶
type ECAP struct {
// contains filtered or unexported fields
}
ECAP serves the public GRPC interface of the ECA.
func (*ECAP) CreateCertificatePair ¶
func (ecap *ECAP) CreateCertificatePair(ctx context.Context, in *pb.ECertCreateReq) (*pb.ECertCreateResp, error)
CreateCertificatePair requests the creation of a new enrollment certificate pair by the ECA.
func (*ECAP) ReadCACertificate ¶
ReadCACertificate reads the certificate of the ECA.
func (*ECAP) ReadCertificateByHash ¶
ReadCertificateByHash reads a single enrollment certificate by hash from the ECA.
func (*ECAP) ReadCertificatePair ¶
func (ecap *ECAP) ReadCertificatePair(ctx context.Context, in *pb.ECertReadReq) (*pb.CertPair, error)
ReadCertificatePair reads an enrollment certificate pair from the ECA.
func (*ECAP) RevokeCertificatePair ¶
RevokeCertificatePair revokes a certificate pair from the ECA. Not yet implemented.
type TCA ¶
type TCA struct { *CA // contains filtered or unexported fields }
TCA is the transaction certificate authority.
type TCAA ¶
type TCAA struct {
// contains filtered or unexported fields
}
TCAA serves the administrator GRPC interface of the TCA.
func (*TCAA) PublishCRL ¶
PublishCRL requests the creation of a certificate revocation list from the TCA. Not yet implemented.
func (*TCAA) ReadCertificateSets ¶
func (tcaa *TCAA) ReadCertificateSets(ctx context.Context, in *pb.TCertReadSetsReq) (*pb.CertSets, error)
ReadCertificateSets returns all certificates matching the filter criteria of the request.
func (*TCAA) RevokeCertificate ¶
RevokeCertificate revokes a certificate from the TCA. Not yet implemented.
func (*TCAA) RevokeCertificateSet ¶
func (tcaa *TCAA) RevokeCertificateSet(context.Context, *pb.TCertRevokeSetReq) (*pb.CAStatus, error)
RevokeCertificateSet revokes a certificate set from the TCA. Not yet implemented.
type TCAP ¶
type TCAP struct {
// contains filtered or unexported fields
}
TCAP serves the public GRPC interface of the TCA.
func (*TCAP) CreateCertificate ¶
func (tcap *TCAP) CreateCertificate(ctx context.Context, in *pb.TCertCreateReq) (*pb.TCertCreateResp, error)
CreateCertificate requests the creation of a new transaction certificate by the TCA.
func (*TCAP) CreateCertificateSet ¶
func (tcap *TCAP) CreateCertificateSet(ctx context.Context, in *pb.TCertCreateSetReq) (*pb.TCertCreateSetResp, error)
CreateCertificateSet requests the creation of a new transaction certificate set by the TCA.
func (*TCAP) ReadCACertificate ¶
ReadCACertificate reads the certificate of the TCA.
func (*TCAP) ReadCertificate ¶
ReadCertificate reads a transaction certificate from the TCA.
func (*TCAP) ReadCertificateSet ¶
func (tcap *TCAP) ReadCertificateSet(ctx context.Context, in *pb.TCertReadSetReq) (*pb.CertSet, error)
ReadCertificateSet reads a transaction certificate set from the TCA. Not yet implemented.
func (*TCAP) RevokeCertificate ¶
RevokeCertificate revokes a certificate from the TCA. Not yet implemented.
func (*TCAP) RevokeCertificateSet ¶
func (tcap *TCAP) RevokeCertificateSet(context.Context, *pb.TCertRevokeSetReq) (*pb.CAStatus, error)
RevokeCertificateSet revokes a certificate set from the TCA. Not yet implemented.
type TLSCA ¶
type TLSCA struct { *CA // contains filtered or unexported fields }
TLSCA is the tls certificate authority.
type TLSCAA ¶
type TLSCAA struct {
// contains filtered or unexported fields
}
TLSCAA serves the administrator GRPC interface of the TLS.
func (*TLSCAA) RevokeCertificate ¶
func (tlscaa *TLSCAA) RevokeCertificate(context.Context, *pb.TLSCertRevokeReq) (*pb.CAStatus, error)
RevokeCertificate revokes a certificate from the TLSCA. Not yet implemented.
type TLSCAP ¶
type TLSCAP struct {
// contains filtered or unexported fields
}
TLSCAP serves the public GRPC interface of the TLSCA.
func (*TLSCAP) CreateCertificate ¶
func (tlscap *TLSCAP) CreateCertificate(ctx context.Context, in *pb.TLSCertCreateReq) (*pb.TLSCertCreateResp, error)
CreateCertificate requests the creation of a new enrollment certificate by the TLSCA.
func (*TLSCAP) ReadCACertificate ¶
ReadCACertificate reads the certificate of the TLSCA.
func (*TLSCAP) ReadCertificate ¶
ReadCertificate reads an enrollment certificate from the TLSCA.
func (*TLSCAP) RevokeCertificate ¶
func (tlscap *TLSCAP) RevokeCertificate(context.Context, *pb.TLSCertRevokeReq) (*pb.CAStatus, error)
RevokeCertificate revokes a certificate from the TLSCA. Not yet implemented.