crypto

Documentation

Index

• Constants
• func ExpiresAt(identityBytes []byte) time.Time
• func GetRandomBytes(len int) ([]byte, error)
• func GetRandomNonce() ([]byte, error)
• func SanitizeIdentity(identity []byte) ([]byte, error)
• func TrackExpiration(tls bool, serverCert []byte, clientCertChain [][]byte, sIDBytes []byte, ...)
• type IdentitySerializer
• type LocalSigner
• type Scheduler
• type SignatureHeaderCreator
  • func NewSignatureHeaderCreator(ss SignerSupport) *SignatureHeaderCreator
  • func (bs *SignatureHeaderCreator) NewSignatureHeader() (*cb.SignatureHeader, error)
• type SignatureHeaderMaker
• type Signer
• type SignerSupport
• type WarnFunc

Constants

const (
	// NonceSize is the default NonceSize
	NonceSize = 24
)

Functions

func ExpiresAt

func ExpiresAt(identityBytes []byte) time.Time

ExpiresAt returns when the given identity expires, or a zero time.Time in case we cannot determine that

func GetRandomBytes

func GetRandomBytes(len int) ([]byte, error)

GetRandomBytes returns len random looking bytes

func GetRandomNonce

func GetRandomNonce() ([]byte, error)

GetRandomNonce returns a random byte array of length NonceSize

func SanitizeIdentity

func SanitizeIdentity(identity []byte) ([]byte, error)

func TrackExpiration

func TrackExpiration(tls bool, serverCert []byte, clientCertChain [][]byte, sIDBytes []byte, warn WarnFunc, now time.Time, s Scheduler)

TrackExpiration warns a week before one of the certificates expires

Types

type IdentitySerializer

type IdentitySerializer interface {
	// Serialize converts an identity to bytes
	Serialize() ([]byte, error)
}

IdentitySerializer serializes identities

type LocalSigner

type LocalSigner interface {
	SignatureHeaderMaker
	Signer
}

LocalSigner is a temporary stub interface which will be implemented by the local MSP

type Scheduler

type Scheduler func(d time.Duration, f func()) *time.Timer

Scheduler invokes f after d time, and can be replaced with time.AfterFunc.

type SignatureHeaderCreator

type SignatureHeaderCreator struct {
	SignerSupport
}

SignatureHeaderCreator creates signature headers

func NewSignatureHeaderCreator

func NewSignatureHeaderCreator(ss SignerSupport) *SignatureHeaderCreator

NewSignatureHeaderCreator creates new signature headers

func (*SignatureHeaderCreator) NewSignatureHeader

func (bs *SignatureHeaderCreator) NewSignatureHeader() (*cb.SignatureHeader, error)

NewSignatureHeader creates a SignatureHeader with the correct signing identity and a valid nonce

type SignatureHeaderMaker

type SignatureHeaderMaker interface {
	// NewSignatureHeader creates a SignatureHeader with the correct signing identity and a valid nonce
	NewSignatureHeader() (*cb.SignatureHeader, error)
}

SignatureHeaderMaker creates a new SignatureHeader

type Signer

type Signer interface {
	// Sign a message and return the signature over the digest, or error on failure
	Sign(message []byte) ([]byte, error)
}

Signer signs messages

type SignerSupport

type SignerSupport interface {
	Signer
	IdentitySerializer
}

SignerSupport implements the needed support for LocalSigner

type WarnFunc

type WarnFunc func(format string, args ...interface{})

WarnFunc notifies a warning happened with the given format, and can be replaced with Warnf of a logger.