certs

Documentation

Overview

Package certs provides splice provisioning support for certificate generation, lookup and verification during the provisioning process.

Index

• Variables
• func ClientID(cert []byte) string
• func Fingerprint(cert []byte) [32]byte
• func PublicKey(c []byte) ([]byte, error)
• func VerifyCert(c []byte, hostname, base, path, caOrg, roots string, verify bool) error
• type Certificate
  • func (c *Certificate) Generate(cn string, notBefore, notAfter time.Time) error

Variables

var (
	// Intermediates cert pool to be used for validating cert intermediates
	Intermediates = x509.NewCertPool()
	// Roots cert pool to be used for validating cert roots
	Roots = x509.NewCertPool()
)

Functions

func ClientID

func ClientID(cert []byte) string

ClientID returns the client identifier string.

func Fingerprint

func Fingerprint(cert []byte) [32]byte

Fingerprint generates a sha256 certificate fingerprint

func PublicKey

func PublicKey(c []byte) ([]byte, error)

PublicKey takes a raw DER encoded cert, and returns only the public key portion of the certificate in DER format.

func VerifyCert

func VerifyCert(c []byte, hostname, base, path, caOrg, roots string, verify bool) error

VerifyCert takes a raw DER encoded cert, verifies that it is valid and optionally attempts to verify its certificate chain. It returns the DER encoded public key of the certificate.

Types

type Certificate

type Certificate struct {
	Cert      *x509.Certificate
	Decrypter crypto.Decrypter

	Key interface{}
}

Certificate holds a host certificate including the x509 certificate and its corresponding key.

func (*Certificate) Generate

func (c *Certificate) Generate(cn string, notBefore, notAfter time.Time) error

Generate generates a self-signed certificate using a template and returns the certificate in DER format and its key.