certificate

May 29, 2023

Changes in this version

+ const RenewBeforeCertExpires

+ const TypeCertificate

+ const TypeCertificateRequest

+ const TypePrivateKey

+ var ErrInvalidCertSecret = errors.New("invalid secret for certificate")

+ var ErrNoCertificateInPEM = errors.New("no certificate in PEM")

+ var ErrSecretNotFound = errors.New("secret not found")

+ func DecodePEMCertificate(certPEM []byte) (*x509.Certificate, error)

+ func DecodePEMPrivateKey(keyPEM []byte) (*rsa.PrivateKey, error)

+ func EncodeCertDERtoPEM(derBytes []byte) (pem.Certificate, error)

+ func EncodeCertReqDERtoPEM(derBytes []byte) (pem.CertificateRequest, error)

+ func EncodeKeyDERtoPEM(priv *rsa.PrivateKey) (pem.PrivateKey, error)

+ type CertType string

+ const IngressGateway

+ const Internal

+ const Service

type Certificate

+ CertChain pem.Certificate

+ IssuingCA pem.RootCertificate

+ PrivateKey pem.PrivateKey

+ SANames []string

+ TrustedCAs pem.RootCertificate

+ func NewFromPEM(pemCert pem.Certificate, pemKey pem.PrivateKey) (*Certificate, error)

+ func (c *Certificate) GetCertificateChain() pem.Certificate

+ func (c *Certificate) GetCommonName() CommonName

+ func (c *Certificate) GetExpiration() time.Time

+ func (c *Certificate) GetIssuingCA() pem.RootCertificate

+ func (c *Certificate) GetPrivateKey() pem.PrivateKey

+ func (c *Certificate) GetSerialNumber() SerialNumber

+ func (c *Certificate) GetTrustedCAs() pem.RootCertificate

+ type CommonName string

+ func (cn CommonName) String() string

+ type IssueOption func(*issueOptions)

+ func FullCNProvided() IssueOption

+ func SubjectAlternativeNames(saNames ...string) IssueOption

+ func ValidityDurationProvided(validityDuration *time.Duration) IssueOption

+ type Issuer interface

+ IssueCertificate func(CommonName, []string, time.Duration) (*Certificate, error)

+ type MRCClient interface

+ GetCertIssuerForMRC func(mrc *v1alpha2.MeshRootCertificate) (Issuer, pem.RootCertificate, error)

+ List func() ([]*v1alpha2.MeshRootCertificate, error)

+ type MRCEvent struct

+ MRC *v1alpha2.MeshRootCertificate

+ Type MRCEventType

+ type MRCEventBroker interface

+ Watch func(context.Context) (<-chan MRCEvent, error)

+ type MRCEventType string

+ var MRCEventAdded MRCEventType = "meshrootcertificate-added"

+ var MRCEventUpdated MRCEventType = "meshrootcertificate-updated"

type Manager

+ func FakeCertManager() (*Manager, error)

+ func NewManager(ctx context.Context, mrcClient MRCClient, ...) (*Manager, error)

+ func (m *Manager) GetTrustDomain() string

+ func (m *Manager) ListIssuedCertificates() []*Certificate

+ func (m *Manager) ReleaseCertificate(key string)

+ func (m *Manager) ShouldRotate(c *Certificate) bool

+ type SerialNumber string

+ func (sn SerialNumber) String() string

Jul 18, 2022

Changes in this version

+ var SerialNumberLimit = new(big.Int).Lsh(big.NewInt(1), 128)

+ type Certificate struct

+ CA []byte

+ CommonName string

+ CrtPEM []byte

+ Expiration time.Time

+ KeyPEM []byte

+ SerialNumber string

+ type CertificateManagerType string

+ const Archon

+ const CertManager

+ const Manual

+ type Manager interface

+ GetCertificate func(cn string) (*Certificate, error)

+ GetRootCertificate func() (*Certificate, error)

+ IssueCertificate func(cn string, validityPeriod time.Duration, dnsNames []string) (*Certificate, error)