darwin

Documentation

Overview

Package darwin contains a darwin-specific client for accessing the keychain APIs directly, bypassing the RPC mechanism of the universal client.

Index

• type SecureKey
  • func NewSecureKey(issuerCN string) (*SecureKey, error)
  • func (sk *SecureKey) CertificateChain() [][]byte
  • func (sk *SecureKey) Close()
  • func (sk *SecureKey) Public() crypto.PublicKey
  • func (sk *SecureKey) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) (signed []byte, err error)

Types

type SecureKey

type SecureKey struct {
	// contains filtered or unexported fields
}

SecureKey is a public wrapper for the internal keychain implementation.

func NewSecureKey

func NewSecureKey(issuerCN string) (*SecureKey, error)

NewSecureKey returns a handle to the first available certificate and private key pair in the MacOS Keychain matching the issuer CN filter. This includes both the current login keychain for the user as well as the system keychain.

func (*SecureKey) CertificateChain

func (sk *SecureKey) CertificateChain() [][]byte

CertificateChain returns the SecureKey's raw X509 cert chain. This contains the public key.

func (*SecureKey) Close

func (sk *SecureKey) Close()

Close frees up resources associated with the underlying key.

func (*SecureKey) Public

func (sk *SecureKey) Public() crypto.PublicKey

Public returns the public key for this SecureKey.

func (*SecureKey) Sign

func (sk *SecureKey) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) (signed []byte, err error)

Sign signs a message digest, using the specified signer options.