ca

Documentation

Index

• Variables
• func CreateCertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)
• func CreateMiddleCACertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)
• func CreateSelfSignedCACertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)
• func EncodeCertificateChain(out io.Writer, certificates []*x509.Certificate) (err error)
• func EncodePKCS1PrivateKey(out io.Writer, privateKey any) (err error)
• func EncodePKCS8PrivateKey(out io.Writer, privateKey any) error
• type CertificateOptions
  • func (c *CertificateOptions) IsMiddleCA() bool
  • func (c *CertificateOptions) IsRootCA() bool
  • func (c *CertificateOptions) ToX509Template() *x509.Certificate
• type CertificateOptionsBuilder
  • func NewCertificationOptionBuilder() *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) Build() CertificateOptions
  • func (b *CertificateOptionsBuilder) WithCA(isCA bool) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithDomains(domains []string) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithIPs(ips []net.IP) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithIssuer(issuer *x509.Certificate) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithIssuerPrivateKey(issuerPrivateKey any) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithNotAfter(notAfter time.Time) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithNotBefore(notBefore time.Time) *CertificateOptionsBuilder
  • func (b *CertificateOptionsBuilder) WithSubject(subject pkix.Name) *CertificateOptionsBuilder
• type KeyOptions
• type KeyOptionsBuilder
  • func NewKeyOptionBuilder() *KeyOptionsBuilder
  • func (b *KeyOptionsBuilder) Build() KeyOptions
  • func (b *KeyOptionsBuilder) WithCurve(curve elliptic.Curve) *KeyOptionsBuilder
  • func (b *KeyOptionsBuilder) WithKeySize(keySize int) *KeyOptionsBuilder
  • func (b *KeyOptionsBuilder) WithRandom(random io.Reader) *KeyOptionsBuilder
• type KeyPair
  • func NewKeyPair(privateKey any) (KeyPair, error)
• type KeyPairGenerator
  • func GetKeyPairGenerator(algorithm string, opts KeyOptions) (KeyPairGenerator, error)

Variables

var (
	UnknownPrivateKeyError = errors.New("unknown private key")
	UnknownAlgorithmError  = errors.New("unknown algorithm")
)

Functions

func CreateCertificate

func CreateCertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)

func CreateMiddleCACertificate

func CreateMiddleCACertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)

func CreateSelfSignedCACertificate

func CreateSelfSignedCACertificate(keyPair KeyPair, opts CertificateOptions) (*x509.Certificate, error)

func EncodeCertificateChain

func EncodeCertificateChain(out io.Writer, certificates []*x509.Certificate) (err error)

func EncodePKCS1PrivateKey

func EncodePKCS1PrivateKey(out io.Writer, privateKey any) (err error)

func EncodePKCS8PrivateKey

func EncodePKCS8PrivateKey(out io.Writer, privateKey any) error

Types

type CertificateOptions

type CertificateOptions struct {
	IsCA             bool
	Issuer           *x509.Certificate
	IssuerPrivateKey any

	Subject   pkix.Name
	NotBefore time.Time
	NotAfter  time.Time
	IPs       []net.IP
	Domains   []string
}

func (*CertificateOptions) IsMiddleCA

func (c *CertificateOptions) IsMiddleCA() bool

func (*CertificateOptions) IsRootCA

func (c *CertificateOptions) IsRootCA() bool

func (*CertificateOptions) ToX509Template

func (c *CertificateOptions) ToX509Template() *x509.Certificate

type CertificateOptionsBuilder

type CertificateOptionsBuilder struct {
	// contains filtered or unexported fields
}

func NewCertificationOptionBuilder

func NewCertificationOptionBuilder() *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) Build

func (b *CertificateOptionsBuilder) Build() CertificateOptions

func (*CertificateOptionsBuilder) WithCA

func (b *CertificateOptionsBuilder) WithCA(isCA bool) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithDomains

func (b *CertificateOptionsBuilder) WithDomains(domains []string) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithIPs

func (b *CertificateOptionsBuilder) WithIPs(ips []net.IP) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithIssuer

func (b *CertificateOptionsBuilder) WithIssuer(issuer *x509.Certificate) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithIssuerPrivateKey

func (b *CertificateOptionsBuilder) WithIssuerPrivateKey(issuerPrivateKey any) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithNotAfter

func (b *CertificateOptionsBuilder) WithNotAfter(notAfter time.Time) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithNotBefore

func (b *CertificateOptionsBuilder) WithNotBefore(notBefore time.Time) *CertificateOptionsBuilder

func (*CertificateOptionsBuilder) WithSubject

func (b *CertificateOptionsBuilder) WithSubject(subject pkix.Name) *CertificateOptionsBuilder

type KeyOptions

type KeyOptions struct {
	Random  io.Reader
	KeySize int
	Curve   elliptic.Curve
}

type KeyOptionsBuilder

type KeyOptionsBuilder struct {
	// contains filtered or unexported fields
}

func NewKeyOptionBuilder

func NewKeyOptionBuilder() *KeyOptionsBuilder

func (*KeyOptionsBuilder) Build

func (b *KeyOptionsBuilder) Build() KeyOptions

func (*KeyOptionsBuilder) WithCurve

func (b *KeyOptionsBuilder) WithCurve(curve elliptic.Curve) *KeyOptionsBuilder

func (*KeyOptionsBuilder) WithKeySize

func (b *KeyOptionsBuilder) WithKeySize(keySize int) *KeyOptionsBuilder

func (*KeyOptionsBuilder) WithRandom

func (b *KeyOptionsBuilder) WithRandom(random io.Reader) *KeyOptionsBuilder

type KeyPair

type KeyPair struct {
	PublicKey  any
	PrivateKey any
}

func NewKeyPair

func NewKeyPair(privateKey any) (KeyPair, error)

type KeyPairGenerator

type KeyPairGenerator interface {
	GenerateKeyPair() (KeyPair, error)
}

func GetKeyPairGenerator

func GetKeyPairGenerator(algorithm string, opts KeyOptions) (KeyPairGenerator, error)