certapi

Documentation

Overview

Package certapi implements the token + TEK verification API.

Index

• Constants
• type Controller
  • func New(ctx context.Context, config *config.APIServerConfig, db *database.Database, ...) (*Controller, error)
  • func (c *Controller) HandleCertificate() http.Handler
• type SignerInfo
  • func GetSignerForRealm(ctx context.Context, realmID uint, cfg config.CertificateSigningConfig, ...) (*SignerInfo, error)

Constants

const (
	HMACLength = 32
)

Types

type Controller

type Controller struct {
	// contains filtered or unexported fields
}

func New

func New(ctx context.Context, config *config.APIServerConfig, db *database.Database, cacher vcache.Cacher, kms keys.KeyManager, h *render.Renderer) (*Controller, error)

func (*Controller) HandleCertificate

func (c *Controller) HandleCertificate() http.Handler

type SignerInfo

type SignerInfo struct {
	Signer   crypto.Signer
	KeyID    string
	Issuer   string
	Audience string
	Duration time.Duration
}

func GetSignerForRealm

func GetSignerForRealm(ctx context.Context, realmID uint,
	cfg config.CertificateSigningConfig, cache *cache.Cache[*SignerInfo], db *database.Database, kms keys.KeyManager,
) (*SignerInfo, error)

GetSignerForRealm gets the certificate signer info for the given realm.