Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

puppetsec

package

Go to main page

Versions in this module

v0

v0.6.0

Jan 12, 2020

Changes in this version

type Config

+ RemoteSignerTokenEnvironment string

+ RemoteSignerTokenFile string

+ RemoteSignerURL string

type PuppetSecurity

+ func (s *PuppetSecurity) RemoteSignRequest(str []byte) (signed []byte, err error)

v0.5.0

Sep 6, 2019

v0.4.3

Jun 21, 2019

Changes in this version

+ type Config struct

+ AllowList []string

+ AlwaysOverwriteCache bool

+ DisableSRV bool

+ DisableTLSVerify bool

+ Identity string

+ PrivilegedUsers []string

+ PuppetCAHost string

+ PuppetCAPort int

+ SSLDir string

+ type Option func(*PuppetSecurity) error

+ func WithChoriaConfig(c *config.Config) Option

+ func WithConfig(c *Config) Option

+ func WithLog(l *logrus.Entry) Option

+ func WithResolver(r Resolver) Option

+ type PuppetSecurity struct

+ func New(opts ...Option) (*PuppetSecurity, error)

+ func (s *PuppetSecurity) CachePublicData(data []byte, identity string) error

+ func (s *PuppetSecurity) CachedPublicData(identity string) ([]byte, error)

+ func (s *PuppetSecurity) CallerIdentity(caller string) (string, error)

+ func (s *PuppetSecurity) CallerName() string

+ func (s *PuppetSecurity) ChecksumBytes(data []byte) []byte

+ func (s *PuppetSecurity) ChecksumString(data string) []byte

+ func (s *PuppetSecurity) Enroll(ctx context.Context, wait time.Duration, cb func(int)) error

+ func (s *PuppetSecurity) HTTPClient(secure bool) (*http.Client, error)

+ func (s *PuppetSecurity) Identity() string

+ func (s *PuppetSecurity) PrivilegedVerifyByteSignature(dat []byte, sig []byte, identity string) bool

+ func (s *PuppetSecurity) PrivilegedVerifyStringSignature(dat string, sig []byte, identity string) bool

+ func (s *PuppetSecurity) Provider() string

+ func (s *PuppetSecurity) PublicCertPem() (*pem.Block, error)

+ func (s *PuppetSecurity) PublicCertTXT() ([]byte, error)

+ func (s *PuppetSecurity) SSLContext() (*http.Transport, error)

+ func (s *PuppetSecurity) SignBytes(str []byte) ([]byte, error)

+ func (s *PuppetSecurity) SignString(str string) ([]byte, error)

+ func (s *PuppetSecurity) TLSConfig() (*tls.Config, error)

+ func (s *PuppetSecurity) Validate() ([]string, bool)

+ func (s *PuppetSecurity) VerifyByteSignature(dat []byte, sig []byte, identity string) bool

+ func (s *PuppetSecurity) VerifyCertificate(certpem []byte, name string) error

+ func (s *PuppetSecurity) VerifyStringSignature(str string, sig []byte, identity string) bool

+ type Resolver interface

+ QuerySrvRecords func(records []string) ([]srvcache.Server, error)