certstore

README

Go library for creation and maintenance of X.509 certificate stores

License

This project is subject to the the MIT License. See LICENSE information for details.

Documentation

Overview

Package certstore provides functionality for creation and mantainenace of X.509 certificate stores.

Index

• type Registry
  • func NewStore(backend storage.Backend, cacheTTL time.Duration) (*Registry, error)
  • func NewStoreFromURI(uri string, basePath string) (*Registry, error)
  • func (registry *Registry) CertPools() (*x509.CertPool, *x509.CertPool, error)
  • func (registry *Registry) CreateCertificate(name string, factory certs.CertificateFactory, user string) (string, error)
  • func (registry *Registry) CreateCertificateRequest(name string, factory certs.CertificateRequestFactory, user string) (string, error)
  • func (registry *Registry) Entries() (*RegistryEntries, error)
  • func (registry *Registry) Entry(name string) (*RegistryEntry, error)
  • func (registry *Registry) Merge(other *Registry, user string) error
  • func (registry *Registry) MergeCertificate(name string, certificate *x509.Certificate, user string) (string, bool, error)
  • func (registry *Registry) MergeCertificateRequest(name string, certificateRequest *x509.CertificateRequest, user string) (string, bool, error)
  • func (registry *Registry) MergeKey(name string, key crypto.PrivateKey, user string) (string, bool, error)
  • func (registry *Registry) MergeRevocationList(name string, revocationList *x509.RevocationList, user string) (string, bool, error)
  • func (registry *Registry) Name() string
• type RegistryEntries
  • func (entries *RegistryEntries) Find(match func(entry *RegistryEntry) bool) (*RegistryEntry, error)
  • func (entries *RegistryEntries) Next() (*RegistryEntry, error)
• type RegistryEntry
  • func (entry *RegistryEntry) Attributes() map[string]string
  • func (entry *RegistryEntry) CanIssue(keyUsage x509.KeyUsage) bool
  • func (entry *RegistryEntry) Certificate() *x509.Certificate
  • func (entry *RegistryEntry) CertificateRequest() *x509.CertificateRequest
  • func (entry *RegistryEntry) HasCertificate() bool
  • func (entry *RegistryEntry) HasCertificateRequest() bool
  • func (entry *RegistryEntry) HasKey() bool
  • func (entry *RegistryEntry) HasRevocationList() bool
  • func (entry *RegistryEntry) IsCA() bool
  • func (entry *RegistryEntry) IsRoot() bool
  • func (entry *RegistryEntry) Key(user string) crypto.PrivateKey
  • func (entry *RegistryEntry) Name() string
  • func (entry *RegistryEntry) ResetRevocationList(factory certs.RevocationListFactory, user string) (*x509.RevocationList, error)
  • func (entry *RegistryEntry) RevocationList() *x509.RevocationList
  • func (entry *RegistryEntry) SetAttributes(attributes map[string]string) error

Types

type Registry

type Registry struct {
	// contains filtered or unexported fields
}

func NewStore

func NewStore(backend storage.Backend, cacheTTL time.Duration) (*Registry, error)

func NewStoreFromURI

func NewStoreFromURI(uri string, basePath string) (*Registry, error)

func (*Registry) CertPools

func (registry *Registry) CertPools() (*x509.CertPool, *x509.CertPool, error)

func (*Registry) CreateCertificate

func (registry *Registry) CreateCertificate(name string, factory certs.CertificateFactory, user string) (string, error)

func (*Registry) CreateCertificateRequest

func (registry *Registry) CreateCertificateRequest(name string, factory certs.CertificateRequestFactory, user string) (string, error)

func (*Registry) Entries

func (registry *Registry) Entries() (*RegistryEntries, error)

func (*Registry) Entry

func (registry *Registry) Entry(name string) (*RegistryEntry, error)

func (*Registry) Merge

func (registry *Registry) Merge(other *Registry, user string) error

func (*Registry) MergeCertificate

func (registry *Registry) MergeCertificate(name string, certificate *x509.Certificate, user string) (string, bool, error)

func (*Registry) MergeCertificateRequest

func (registry *Registry) MergeCertificateRequest(name string, certificateRequest *x509.CertificateRequest, user string) (string, bool, error)

func (*Registry) MergeKey

func (registry *Registry) MergeKey(name string, key crypto.PrivateKey, user string) (string, bool, error)

func (*Registry) MergeRevocationList

func (registry *Registry) MergeRevocationList(name string, revocationList *x509.RevocationList, user string) (string, bool, error)

func (*Registry) Name

func (registry *Registry) Name() string

type RegistryEntries

type RegistryEntries struct {
	// contains filtered or unexported fields
}

func (*RegistryEntries) Find

func (entries *RegistryEntries) Find(match func(entry *RegistryEntry) bool) (*RegistryEntry, error)

func (*RegistryEntries) Next

func (entries *RegistryEntries) Next() (*RegistryEntry, error)

type RegistryEntry

type RegistryEntry struct {
	// contains filtered or unexported fields
}

func (*RegistryEntry) Attributes

func (entry *RegistryEntry) Attributes() map[string]string

func (*RegistryEntry) CanIssue

func (entry *RegistryEntry) CanIssue(keyUsage x509.KeyUsage) bool

func (*RegistryEntry) Certificate

func (entry *RegistryEntry) Certificate() *x509.Certificate

func (*RegistryEntry) CertificateRequest

func (entry *RegistryEntry) CertificateRequest() *x509.CertificateRequest

func (*RegistryEntry) HasCertificate

func (entry *RegistryEntry) HasCertificate() bool

func (*RegistryEntry) HasCertificateRequest

func (entry *RegistryEntry) HasCertificateRequest() bool

func (*RegistryEntry) HasKey

func (entry *RegistryEntry) HasKey() bool

func (*RegistryEntry) HasRevocationList

func (entry *RegistryEntry) HasRevocationList() bool

func (*RegistryEntry) IsCA

func (entry *RegistryEntry) IsCA() bool

func (*RegistryEntry) IsRoot

func (entry *RegistryEntry) IsRoot() bool

func (*RegistryEntry) Key

func (entry *RegistryEntry) Key(user string) crypto.PrivateKey

func (*RegistryEntry) Name

func (entry *RegistryEntry) Name() string

func (*RegistryEntry) ResetRevocationList

func (entry *RegistryEntry) ResetRevocationList(factory certs.RevocationListFactory, user string) (*x509.RevocationList, error)

func (*RegistryEntry) RevocationList

func (entry *RegistryEntry) RevocationList() *x509.RevocationList

func (*RegistryEntry) SetAttributes

func (entry *RegistryEntry) SetAttributes(attributes map[string]string) error