devkeys

Documentation

Overview

Package devkeys provides test-only pregenerated and signed root and signer keys.

Index

• Variables
• func DumpTo(opts *Options) error
• type Options

Variables

var (
	// RootPEM contains a PEM-encoded private key generated by the bootstrapping process.
	//go:embed root.pem
	RootPEM []byte

	// RootCert contains a DER-encoded x509 certificate of RootPEM, self-signed as a CA.
	//go:embed root.crt
	RootCert []byte

	// PrimarySigningKeyPEM contains a PEM-encoded private key for signing binaries, generated by the
	// bootstrapping process.
	//go:embed primarySigningKey.pem
	PrimarySigningKeyPEM []byte

	// PrimarySigningKeyCert contains a DER-encoded root-signed x509 certificate for the signer key.
	//go:embed primarySigningKey.crt
	PrimarySigningKeyCert []byte

	// KeyManifest contains a textproto manifest with paths to and names of the root and primary keys,
	// and their certs.
	//go:embed keyManifest.textproto
	KeyManifest []byte
)

Functions

func DumpTo

func DumpTo(opts *Options) error

DumpTo writes the embedded files to a directory so they can be used for tests that need file paths.

Types

type Options

type Options struct {
	KeyDir                       string
	CertRoot                     string
	CertDir                      string
	Bucket                       string
	RootKeyVersionName           string
	PrimarySigningKeyVersionName string
}

Options provides parameters to where to write dev keys and certificate files, and how to populate the keyManifest.textproto.