tls

Documentation

Index

• func FileDoesNotExist(file string) bool
• func GenerateCA(signer crypto.Signer, sn *big.Int, days int, constraints []string) (string, error)
• func GenerateCert(signer crypto.Signer, ca string, sn *big.Int, name string, days int, ...) (string, string, error)
• func GeneratePrivateKey() (crypto.Signer, string, error)
• func GenerateSerialNumber() (*big.Int, error)
• func New() *cmd
• func ParseSigner(pemValue string) (crypto.Signer, error)
• func Verify(caString, certString, dns string) error

Functions

func FileDoesNotExist

func FileDoesNotExist(file string) bool

func GenerateCA

func GenerateCA(signer crypto.Signer, sn *big.Int, days int, constraints []string) (string, error)

GenerateCA generates a new CA for agent TLS (not to be confused with Connect TLS)

func GenerateCert

func GenerateCert(signer crypto.Signer, ca string, sn *big.Int, name string, days int, DNSNames []string, IPAddresses []net.IP, extKeyUsage []x509.ExtKeyUsage) (string, string, error)

GenerateCert generates a new certificate for agent TLS (not to be confused with Connect TLS)

func GeneratePrivateKey

func GeneratePrivateKey() (crypto.Signer, string, error)

GeneratePrivateKey generates a new ecdsa private key

func GenerateSerialNumber

func GenerateSerialNumber() (*big.Int, error)

GenerateSerialNumber returns random bigint generated with crypto/rand

func New

func New() *cmd

func ParseSigner

func ParseSigner(pemValue string) (crypto.Signer, error)

ParseSigner parses a crypto.Signer from a PEM-encoded key. The private key is expected to be the first block in the PEM value.

func Verify

func Verify(caString, certString, dns string) error