certutil

Documentation

Index

• func EncryptKey(key crypto.PrivateKey, passphrase string) ([]byte, error)
• func NewRSARootAndChildCerts() (Pair, Pair, error)
• func NewRootAndChildCerts() (Pair, Pair, error)
• type Option
  • func WithCNPrefix(cnPrefix string) Option
  • func WithClientCert(clientCert bool) Option
  • func WithDNSNames(dnsNames ...string) Option
• type Pair
  • func GenerateChildCert(name string, ips []net.IP, caPrivKey crypto.PrivateKey, ...) (*tls.Certificate, Pair, error)
  • func GenerateGenericChildCert(name string, ips []net.IP, priv crypto.PrivateKey, pub crypto.PublicKey, ...) (*tls.Certificate, Pair, error)
  • func GenerateRSAChildCert(name string, ips []net.IP, caPrivKey crypto.PrivateKey, ...) (*tls.Certificate, Pair, error)
  • func NewRSARootCA(opts ...Option) (crypto.PrivateKey, *x509.Certificate, Pair, error)
  • func NewRootCA(opts ...Option) (crypto.PrivateKey, *x509.Certificate, Pair, error)

Functions

func EncryptKey

func EncryptKey(key crypto.PrivateKey, passphrase string) ([]byte, error)

EncryptKey accepts a *ecdsa.PrivateKey or *rsa.PrivateKey, it encrypts it and returns the encrypted key in PEM format.

func NewRSARootAndChildCerts

func NewRSARootAndChildCerts() (Pair, Pair, error)

NewRSARootAndChildCerts returns an RSA (2048-bit) root CA and a child certificate and their keys for "localhost" and "127.0.0.1".

func NewRootAndChildCerts

func NewRootAndChildCerts() (Pair, Pair, error)

NewRootAndChildCerts returns an ECDSA (P-384) root CA and a child certificate and their keys for "localhost" and "127.0.0.1".

Types

type Option

type Option func(opt *configs)

func WithCNPrefix

func WithCNPrefix(cnPrefix string) Option

WithCNPrefix adds cnPrefix as prefix for the CN.

func WithClientCert

func WithClientCert(clientCert bool) Option

WithClientCert generates a client certificate, without any IP or SAN/DNS. It overrides any other IP or name set by other means.

func WithDNSNames

func WithDNSNames(dnsNames ...string) Option

WithDNSNames adds dnsNames to the DNSNames.

type Pair

type Pair struct {
	Cert []byte
	Key  []byte
}

Pair is a certificate and its private key in PEM format.

func GenerateChildCert

func GenerateChildCert(name string, ips []net.IP, caPrivKey crypto.PrivateKey, caCert *x509.Certificate, opts ...Option) (*tls.Certificate, Pair, error)

GenerateChildCert generates a ECDSA (P-384) x509 Certificate as a child of caCert and returns the following: - the certificate and private key as a tls.Certificate - a Pair with the certificate and its key im PEM format

If any error occurs during the generation process, a non-nil error is returned.

func GenerateGenericChildCert

func GenerateGenericChildCert(
	name string,
	ips []net.IP,
	priv crypto.PrivateKey,
	pub crypto.PublicKey,
	caPrivKey crypto.PrivateKey,
	caCert *x509.Certificate,
	opts ...Option) (*tls.Certificate, Pair, error)

GenerateGenericChildCert generates a x509 Certificate using priv and pub as the certificate's private and public keys and as a child of caCert. Use this function if you need fine control over keys or ips and certificate name, otherwise prefer GenerateChildCert or NewRootAndChildCerts/NewRSARootAndChildCerts

It returns the following: - the certificate and private key as a tls.Certificate - a Pair with the certificate and its key im PEM format

If any error occurs during the generation process, a non-nil error is returned.

func GenerateRSAChildCert

func GenerateRSAChildCert(name string, ips []net.IP, caPrivKey crypto.PrivateKey, caCert *x509.Certificate, opts ...Option) (*tls.Certificate, Pair, error)

GenerateRSAChildCert generates a RSA with a 2048-bit key x509 Certificate as a child of caCert and returns the following: - the certificate and private key as a tls.Certificate - a Pair with the certificate and its key im PEM format

If any error occurs during the generation process, a non-nil error is returned.

func NewRSARootCA

func NewRSARootCA(opts ...Option) (crypto.PrivateKey, *x509.Certificate, Pair, error)

NewRSARootCA generates a new x509 Certificate using RSA with a 2048-bit key and returns: - the private key - the certificate - the certificate and its key in PEM format as a byte slice.

If any error occurs during the generation process, a non-nil error is returned.

func NewRootCA

func NewRootCA(opts ...Option) (crypto.PrivateKey, *x509.Certificate, Pair, error)

NewRootCA generates a new x509 Certificate using ECDSA P-384 and returns: - the private key - the certificate - the certificate and its key in PEM format as a byte slice.

If any error occurs during the generation process, a non-nil error is returned.