chefcrypto

README

chefcrypto

Various cryptographic routines for communicating with chef servers for golang programs and libraries. Originally part of goiardi, it's been split out for packaging purposes.

Documentation

See the godocs at https://godoc.org/github.com/ctdk/chefcrypto.

AUTHOR

Jeremy Bingham (jeremy@goiardi.gl)

COPYRIGHT

Copyright 2013-2016, Jeremy Bingham

CODE OF CONDUCT

This project adheres to the [Open Code of Conduct][code-of-conduct]. By participating, you are expected to honor this code. [code-of-conduct]: http://todogroup.org/opencodeofconduct/#Goiardi/abuse-coc@goiardi.gl

This code of conduct can also be found in CONDUCT.md in this repository.

LICENSE

Like many Chef ecosystem programs, goairdi is licensed under the Apache 2.0 License. See the LICENSE file for details.

The goiardi documentation in the docs directory is licensed under a Creative Commons Attribution 4.0 International (CC-BY 4.0) License.

Chef is copyright (c) 2008-2014 Chef Software (formerly Opscode, Inc.) and its various contributors.

The depgraph and digraph packages are vendored from Hashicorp's terraform package, and is under the Mozilla Public License version 2.0. The MPL is included in those directories and applies only to those files.

Thanks go out

Documentation

Overview

Package chefcrypto bundles up crytographic routines for goairdi (and anything else that might need it).

Index

• func Auth12HeaderVerify(pkPem string, hashed, sig []byte) error
• func GenerateRSAKeys() (string, string, error)
• func GenerateSalt() ([]byte, error)
• func HashPasswd(passwd string, salt []byte) (string, error)
• func HeaderDecrypt(pkPem string, data string) ([]byte, error)
• func SignTextBlock(textBlock string, privKey *rsa.PrivateKey) (string, error)
• func ValidatePublicKey(publicKey interface{}) (bool, error)

Functions

func Auth12HeaderVerify

func Auth12HeaderVerify(pkPem string, hashed, sig []byte) error

Auth12HeaderVerify verifies the newer version 1.2 Chef authentication protocol headers.

func GenerateRSAKeys

func GenerateRSAKeys() (string, string, error)

GenerateRSAKeys creates a pair of private and public keys for a client.

func GenerateSalt

func GenerateSalt() ([]byte, error)

GenerateSalt makes a new salt for hashing a password.

func HashPasswd

func HashPasswd(passwd string, salt []byte) (string, error)

HashPasswd SHA512 hashes a password string with the provided salt.

func HeaderDecrypt

func HeaderDecrypt(pkPem string, data string) ([]byte, error)

HeaderDecrypt decrypts the encrypted header with the client or user's public key for validating requests. This function is informed by chef-golang's privateDecrypt function.

func SignTextBlock

func SignTextBlock(textBlock string, privKey *rsa.PrivateKey) (string, error)

SignTextBlock signs a block of text using the provided private RSA key. Used by shovey to sign requests that the client can verify.

func ValidatePublicKey

func ValidatePublicKey(publicKey interface{}) (bool, error)

ValidatePublicKey checks that the provided public key is valid.