ca

Documentation

Index

• func GenerateFulcioIntermediate(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)
• func GenerateLeafCert(subject string, oidcIssuer string, expiration time.Time, ...) (*x509.Certificate, error)
• func GenerateRootCa() (*x509.Certificate, *ecdsa.PrivateKey, error)
• func GenerateTSAIntermediate(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)
• func GenerateTSALeafCert(expiration time.Time, priv *ecdsa.PrivateKey, parentTemplate *x509.Certificate, ...) (*x509.Certificate, error)
• type TestEntity
  • func (e *TestEntity) HasInclusionPromise() bool
  • func (e *TestEntity) HasInclusionProof() bool
  • func (e *TestEntity) SignatureContent() (verify.SignatureContent, error)
  • func (e *TestEntity) Timestamps() ([][]byte, error)
  • func (e *TestEntity) TlogEntries() ([]*tlog.Entry, error)
  • func (e *TestEntity) VerificationContent() (verify.VerificationContent, error)
• type VirtualSigstore
  • func NewVirtualSigstore() (*VirtualSigstore, error)
  • func (ca *VirtualSigstore) Attest(identity, issuer string, envelopeBody []byte) (*TestEntity, error)
  • func (ca *VirtualSigstore) AttestAtTime(identity, issuer string, envelopeBody []byte, integratedTime time.Time, ...) (*TestEntity, error)
  • func (ca *VirtualSigstore) CTLogs() map[string]*root.TransparencyLog
  • func (ca *VirtualSigstore) FulcioCertificateAuthorities() []root.CertificateAuthority
  • func (ca *VirtualSigstore) GenerateLeafCert(identity, issuer string) (*x509.Certificate, *ecdsa.PrivateKey, error)
  • func (ca *VirtualSigstore) GenerateTlogEntry(leafCert *x509.Certificate, envelope *dsse.Envelope, sig []byte, ...) (*tlog.Entry, error)
  • func (ca *VirtualSigstore) GetInclusionProof(rekorBodyRaw []byte) (*models.InclusionProof, error)
  • func (ca *VirtualSigstore) PublicKeyVerifier(keyID string) (root.TimeConstrainedVerifier, error)
  • func (ca *VirtualSigstore) RekorLogID() (string, error)
  • func (ca *VirtualSigstore) RekorLogs() map[string]*root.TransparencyLog
  • func (ca *VirtualSigstore) RekorSignPayload(payload tlog.RekorPayload) ([]byte, error)
  • func (ca *VirtualSigstore) Sign(identity, issuer string, artifact []byte) (*TestEntity, error)
  • func (ca *VirtualSigstore) SignAtTime(identity, issuer string, artifact []byte, integratedTime time.Time) (*TestEntity, error)
  • func (ca *VirtualSigstore) TimestampResponse(sig []byte) ([]byte, error)
  • func (ca *VirtualSigstore) TimestampingAuthorities() []root.TimestampingAuthority

Functions

func GenerateFulcioIntermediate

func GenerateFulcioIntermediate(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateLeafCert

func GenerateLeafCert(subject string, oidcIssuer string, expiration time.Time, priv *ecdsa.PrivateKey,
	parentTemplate *x509.Certificate, parentPriv crypto.Signer) (*x509.Certificate, error)

func GenerateRootCa

func GenerateRootCa() (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateTSAIntermediate

func GenerateTSAIntermediate(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateTSALeafCert

func GenerateTSALeafCert(expiration time.Time, priv *ecdsa.PrivateKey, parentTemplate *x509.Certificate, parentPriv crypto.Signer) (*x509.Certificate, error)

Types

type TestEntity

type TestEntity struct {
	// contains filtered or unexported fields
}

func (*TestEntity) HasInclusionPromise

func (e *TestEntity) HasInclusionPromise() bool

func (*TestEntity) HasInclusionProof

func (e *TestEntity) HasInclusionProof() bool

func (*TestEntity) SignatureContent

func (e *TestEntity) SignatureContent() (verify.SignatureContent, error)

func (*TestEntity) Timestamps

func (e *TestEntity) Timestamps() ([][]byte, error)

func (*TestEntity) TlogEntries

func (e *TestEntity) TlogEntries() ([]*tlog.Entry, error)

func (*TestEntity) VerificationContent

func (e *TestEntity) VerificationContent() (verify.VerificationContent, error)

type VirtualSigstore

type VirtualSigstore struct {
	// contains filtered or unexported fields
}

func NewVirtualSigstore

func NewVirtualSigstore() (*VirtualSigstore, error)

func (*VirtualSigstore) Attest

func (ca *VirtualSigstore) Attest(identity, issuer string, envelopeBody []byte) (*TestEntity, error)

func (*VirtualSigstore) AttestAtTime

func (ca *VirtualSigstore) AttestAtTime(identity, issuer string, envelopeBody []byte, integratedTime time.Time, generateInclusionProof bool) (*TestEntity, error)

func (*VirtualSigstore) CTLogs

func (ca *VirtualSigstore) CTLogs() map[string]*root.TransparencyLog

func (*VirtualSigstore) FulcioCertificateAuthorities

func (ca *VirtualSigstore) FulcioCertificateAuthorities() []root.CertificateAuthority

func (*VirtualSigstore) GenerateLeafCert

func (ca *VirtualSigstore) GenerateLeafCert(identity, issuer string) (*x509.Certificate, *ecdsa.PrivateKey, error)

func (*VirtualSigstore) GenerateTlogEntry

func (ca *VirtualSigstore) GenerateTlogEntry(leafCert *x509.Certificate, envelope *dsse.Envelope, sig []byte, integratedTime int64, generateInclusionProof bool) (*tlog.Entry, error)

func (*VirtualSigstore) GetInclusionProof

func (ca *VirtualSigstore) GetInclusionProof(rekorBodyRaw []byte) (*models.InclusionProof, error)

func (*VirtualSigstore) PublicKeyVerifier

func (ca *VirtualSigstore) PublicKeyVerifier(keyID string) (root.TimeConstrainedVerifier, error)

func (*VirtualSigstore) RekorLogID

func (ca *VirtualSigstore) RekorLogID() (string, error)

func (*VirtualSigstore) RekorLogs

func (ca *VirtualSigstore) RekorLogs() map[string]*root.TransparencyLog

func (*VirtualSigstore) RekorSignPayload

func (ca *VirtualSigstore) RekorSignPayload(payload tlog.RekorPayload) ([]byte, error)

func (*VirtualSigstore) Sign

func (ca *VirtualSigstore) Sign(identity, issuer string, artifact []byte) (*TestEntity, error)

func (*VirtualSigstore) SignAtTime

func (ca *VirtualSigstore) SignAtTime(identity, issuer string, artifact []byte, integratedTime time.Time) (*TestEntity, error)

func (*VirtualSigstore) TimestampResponse

func (ca *VirtualSigstore) TimestampResponse(sig []byte) ([]byte, error)

func (*VirtualSigstore) TimestampingAuthorities

func (ca *VirtualSigstore) TimestampingAuthorities() []root.TimestampingAuthority