keystore

Documentation

Index

• Constants
• Variables
• func FindChain(key crypto.PublicKey, pool []*x509.Certificate) []*x509.Certificate
• func ToTLSCertificate(entry *Entry) (tls.Certificate, error)
• func ValidateChain(chain []*x509.Certificate) error
• type Entry
  • func (e *Entry) JOSEAlgorithm() jose.SignatureAlgorithm
  • func (e *Entry) JWK() jose.JSONWebKey
• type KeyStore
  • func NewKeyStoreFromKey(privateKey crypto.Signer) (KeyStore, error)
  • func NewKeyStoreFromPEMBytes(pemBytes []byte, password string) (KeyStore, error)
  • func NewKeyStoreFromPEMFile(pemFilePath, password string) (KeyStore, error)

Constants

const (
	AlgRSA   = "RSA"
	AlgECDSA = "ECDSA"
)

Variables

var ErrNoCertificatePresent = errors.New("no certificate present")

var ErrNoSuchKey = errors.New("no such key")

Functions

func FindChain

func FindChain(key crypto.PublicKey, pool []*x509.Certificate) []*x509.Certificate

func ToTLSCertificate

func ToTLSCertificate(entry *Entry) (tls.Certificate, error)

func ValidateChain

func ValidateChain(chain []*x509.Certificate) error

Types

type Entry

type Entry struct {
	KeyID      string
	Alg        string
	KeySize    int
	PrivateKey crypto.Signer
	CertChain  []*x509.Certificate
}

func (*Entry) JOSEAlgorithm

func (e *Entry) JOSEAlgorithm() jose.SignatureAlgorithm

func (*Entry) JWK

func (e *Entry) JWK() jose.JSONWebKey

type KeyStore

type KeyStore interface {
	GetKey(id string) (*Entry, error)
	Entries() []*Entry
}

func NewKeyStoreFromKey

func NewKeyStoreFromKey(privateKey crypto.Signer) (KeyStore, error)

func NewKeyStoreFromPEMBytes

func NewKeyStoreFromPEMBytes(pemBytes []byte, password string) (KeyStore, error)

func NewKeyStoreFromPEMFile

func NewKeyStoreFromPEMFile(pemFilePath, password string) (KeyStore, error)