Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

security

package

Go to main page

Versions in this module

v1

v1.1.2

Oct 26, 2017

v1.1.1

Oct 16, 2017

v1.1.0

Oct 4, 2017

Changes in this version

+ func CompareHashAndPassword(hashedPassword []byte, password string) error

+ func ExtKeyUsageToString(eku x509.ExtKeyUsage) string

+ func KeyUsageToString(ku x509.KeyUsage) []string

+ func PEMContentsToX509(contents []byte) ([]*x509.Certificate, error)

type CertInfo

+ ExpirationTime time.Time

+ ParsedCertificates []*x509.Certificate

type CertificateManager

+ func (cm *CertificateManager) ListCertificates() ([]*CertInfo, error)

+ func (cm *CertificateManager) Metrics() CertificateMetrics

+ type CertificateMetrics struct

+ CAExpiration *metric.Gauge

+ NodeExpiration *metric.Gauge

v1.1.0-rc.1

Oct 4, 2017

v1.0.7

Feb 11, 2018

v1.0.6

Sep 9, 2017

v1.0.5

Aug 17, 2017

v1.0.4

Jul 20, 2017

v1.0.3

Jul 6, 2017

v1.0.2

Jun 7, 2017

v1.0.1

May 18, 2017

Changes in this version

+ const CAPem

+ const ClientPem

+ const EmbeddedCACert

+ const EmbeddedCAKey

+ const EmbeddedCertsDir

+ const EmbeddedNodeCert

+ const EmbeddedNodeKey

+ const EmbeddedRootCert

+ const EmbeddedRootKey

+ const EmbeddedTestUserCert

+ const EmbeddedTestUserKey

+ const NodePem

+ const NodeUser

+ const RootUser

+ var ErrEmptyPassword = errors.New("empty passwords are not permitted")

+ func CreateCAPair(certsDir, caKeyPath string, keySize int, lifetime time.Duration, ...) error

+ func CreateClientPair(certsDir, caKeyPath string, keySize int, lifetime time.Duration, ...) error

+ func CreateNodePair(certsDir, caKeyPath string, keySize int, lifetime time.Duration, ...) error

+ func GenerateCA(signer crypto.Signer, lifetime time.Duration) ([]byte, error)

+ func GenerateClientCert(caCert *x509.Certificate, caPrivateKey crypto.PrivateKey, ...) ([]byte, error)

+ func GenerateServerCert(caCert *x509.Certificate, caPrivateKey crypto.PrivateKey, ...) ([]byte, error)

+ func GetCertificateUser(tlsState *tls.ConnectionState) (string, error)

+ func HashPassword(password string) ([]byte, error)

+ func LoadClientTLSConfig(sslCA, sslCert, sslCertKey string) (*tls.Config, error)

+ func LoadServerTLSConfig(sslCA, sslCert, sslCertKey string) (*tls.Config, error)

+ func PEMToCertificates(contents []byte) ([]*pem.Block, error)

+ func PEMToPrivateKey(contents []byte) (crypto.PrivateKey, error)

+ func PrivateKeyToPEM(key crypto.PrivateKey) (*pem.Block, error)

+ func PromptForPassword() (string, error)

+ func PromptForPasswordAndHash() ([]byte, error)

+ func PromptForPasswordTwice() (string, error)

+ func ProtoAuthHook(insecureMode bool, tlsState *tls.ConnectionState) (func(proto.Message, bool) error, error)

+ func ResetAssetLoader()

+ func SetAssetLoader(al AssetLoader)

+ func WritePEMToFile(path string, mode os.FileMode, overwrite bool, blocks ...*pem.Block) error

+ type AssetLoader struct

+ ReadDir func(dirname string) ([]os.FileInfo, error)

+ ReadFile func(filename string) ([]byte, error)

+ Stat func(name string) (os.FileInfo, error)

+ type CertInfo struct

+ Error error

+ FileContents []byte

+ FileUsage pemUsage

+ Filename string

+ KeyFileContents []byte

+ KeyFilename string

+ Name string

+ type CertificateLoader struct

+ func NewCertificateLoader(certsDir string) *CertificateLoader

+ func (cl *CertificateLoader) Certificates() []*CertInfo

+ func (cl *CertificateLoader) Load() error

+ func (cl *CertificateLoader) MaybeCreateCertsDir() error

+ func (cl *CertificateLoader) TestDisablePermissionChecks()

+ type CertificateManager struct

+ func NewCertificateManager(certsDir string) (*CertificateManager, error)

+ func NewCertificateManagerFirstRun(certsDir string) (*CertificateManager, error)

+ func (cm *CertificateManager) CACert() *CertInfo

+ func (cm *CertificateManager) CACertPath() string

+ func (cm *CertificateManager) ClientCertPath(user string) string

+ func (cm *CertificateManager) ClientCerts() map[string]*CertInfo

+ func (cm *CertificateManager) ClientKeyPath(user string) string

+ func (cm *CertificateManager) GetCACertPath() (string, error)

+ func (cm *CertificateManager) GetClientCertPaths(user string) (string, string, error)

+ func (cm *CertificateManager) GetClientTLSConfig(user string) (*tls.Config, error)

+ func (cm *CertificateManager) GetEmbeddedServerTLSConfig(_ *tls.ClientHelloInfo) (*tls.Config, error)

+ func (cm *CertificateManager) GetServerTLSConfig() (*tls.Config, error)

+ func (cm *CertificateManager) LoadCertificates() error

+ func (cm *CertificateManager) NodeCert() *CertInfo

+ func (cm *CertificateManager) NodeCertPath() string

+ func (cm *CertificateManager) NodeKeyPath() string

+ func (cm *CertificateManager) RegisterSignalHandler(stopper *stop.Stopper)

+ type RequestWithUser interface

+ GetUser func() string

+ type UserAuthHook func(string, bool) error

+ func UserAuthCertHook(insecureMode bool, tlsState *tls.ConnectionState) (UserAuthHook, error)

+ func UserAuthPasswordHook(insecureMode bool, password string, hashedPassword []byte) UserAuthHook