ca

Documentation

Index

• type CA
  • func New() (*CA, error)
  • func (c *CA) GetIntermCACert() []byte
  • func (c *CA) GetMeshCACert() []byte
  • func (c *CA) GetRootCACert() []byte
  • func (c *CA) NewAttestedMeshCert(names []string, extensions []pkix.Extension, subjectPublicKey any) ([]byte, error)
  • func (c *CA) RotateIntermCerts() error

Types

type CA

type CA struct {
	// contains filtered or unexported fields
}

CA is a cross-signing certificate authority.

func New

func New() (*CA, error)

New creates a new CA.

func (*CA) GetIntermCACert

func (c *CA) GetIntermCACert() []byte

GetIntermCACert returns the intermediate CA certificate in PEM format.

func (*CA) GetMeshCACert

func (c *CA) GetMeshCACert() []byte

GetMeshCACert returns the mesh CA certificate of the CA in PEM format.

func (*CA) GetRootCACert

func (c *CA) GetRootCACert() []byte

GetRootCACert returns the root certificate of the CA in PEM format.

func (*CA) NewAttestedMeshCert

func (c *CA) NewAttestedMeshCert(names []string, extensions []pkix.Extension, subjectPublicKey any) ([]byte, error)

NewAttestedMeshCert creates a new attested mesh certificate.

func (*CA) RotateIntermCerts

func (c *CA) RotateIntermCerts() error

RotateIntermCerts rotates the intermediate and mesh CA certificate. All existing mesh certificates will remain valid under the rootCA but not under the new intermediate and mesh CA certificates. To distribute the new intermediate and mesh CA certificates, all workloads should be restarted.