darwin

Documentation

Overview

Package darwin contains a darwin-specific client for accessing the keychain APIs directly, bypassing the RPC mechanism of the universal client.

Index

• type SecureKey
  • func NewSecureKey(issuerCN string) (*SecureKey, error)
  • func (sk *SecureKey) CertificateChain() [][]byte
  • func (sk *SecureKey) Close()
  • func (sk *SecureKey) Decrypt(_ io.Reader, msg []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error)
  • func (sk *SecureKey) Encrypt(_ io.Reader, msg []byte, opts any) (ciphertext []byte, err error)
  • func (sk *SecureKey) Public() crypto.PublicKey
  • func (sk *SecureKey) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) (signed []byte, err error)

Types

type SecureKey

type SecureKey struct {
	// contains filtered or unexported fields
}

SecureKey is a public wrapper for the internal keychain implementation.

func NewSecureKey

func NewSecureKey(issuerCN string) (*SecureKey, error)

NewSecureKey returns a handle to the first available certificate and private key pair in the MacOS Keychain matching the issuer CN filter. This includes both the current login keychain for the user as well as the system keychain.

func (*SecureKey) CertificateChain

func (sk *SecureKey) CertificateChain() [][]byte

CertificateChain returns the SecureKey's raw X509 cert chain. This contains the public key.

func (*SecureKey) Close

func (sk *SecureKey) Close()

Close frees up resources associated with the underlying key.

func (*SecureKey) Decrypt

func (sk *SecureKey) Decrypt(_ io.Reader, msg []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error)

Decrypt decrypts a ciphertext msg into plaintext, using the specified decrypter opts. Implements crypto.Decrypter interface.

func (*SecureKey) Encrypt

func (sk *SecureKey) Encrypt(_ io.Reader, msg []byte, opts any) (ciphertext []byte, err error)

Encrypt encrypts a plaintext msg into ciphertext, using the specified encrypt opts.

func (*SecureKey) Public

func (sk *SecureKey) Public() crypto.PublicKey

Public returns the public key for this SecureKey.

func (*SecureKey) Sign

func (sk *SecureKey) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) (signed []byte, err error)

Sign signs a message digest, using the specified signer opts. Implements crypto.Signer interface.