sign/

Package gcsca implements the sign.CertificateAuthority interface with GCS backing.

Package memca provides the CertificateAuthority interface entirely in memory without persistence.

Package nonprod provides an in-memory signer and CA for endorsement using generated or provided keys.

Package ops defines operations for signing and interacting with certificate authorities given the interfaces defined in sign/types.

Package transform provides decoding utilities for certificate formats.

Package types defines the interfaces we use to interact with signing and certificates.