kmssigner

Documentation

Overview

Package kmssigner implements a crypto.Signer backed by Google Cloud KMS.

Index

• type Signer
  • func New(api *cloudkms.Service, name string) (Signer, error)
  • func NewWithExplicitMetadata(api *cloudkms.Service, name string, hashAlgo crypto.Hash, ...) (Signer, error)

Types

type Signer

type Signer interface {
	crypto.Signer

	RSAPublicKey() *rsa.PublicKey

	CreationTime() time.Time

	HashAlgo() crypto.Hash
}

Signer extends crypto.Signer to provide more key metadata.

func New

func New(api *cloudkms.Service, name string) (Signer, error)

New returns a crypto.Signer backed by the named Google Cloud KMS key.

func NewWithExplicitMetadata

func NewWithExplicitMetadata(api *cloudkms.Service, name string, hashAlgo crypto.Hash, creationTime time.Time) (Signer, error)

NewWithExplicitMetadata returns a crypto.Signer backed by the named Google Cloud KMS key, but doesn't need the "cloudkms.cryptoKeyVersions.get" permission which would otherwise be required for fetching the hash algorithm and creation time.