ca

Aug 14, 2023

Changes in this version

+ const AWSCreateTimeout

+ const AWSIntermediateTTL

+ const AWSSignTimeout

+ const AWSStateCAARNKey

+ const IntermediateTemplateARN

+ const LeafTemplateARN

+ const RootTemplateARN

+ const VaultAuthMethodTypeAWS

+ const VaultAuthMethodTypeAliCloud

+ const VaultAuthMethodTypeAppRole

+ const VaultAuthMethodTypeAzure

+ const VaultAuthMethodTypeCloudFoundry

+ const VaultAuthMethodTypeGCP

+ const VaultAuthMethodTypeGitHub

+ const VaultAuthMethodTypeJWT

+ const VaultAuthMethodTypeKerberos

+ const VaultAuthMethodTypeKubernetes

+ const VaultAuthMethodTypeLDAP

+ const VaultAuthMethodTypeOCI

+ const VaultAuthMethodTypeOkta

+ const VaultAuthMethodTypeRadius

+ const VaultAuthMethodTypeTLS

+ const VaultAuthMethodTypeToken

+ const VaultAuthMethodTypeUserpass

+ var CertificateTimeDriftBuffer = time.Minute

+ var ErrRateLimited = errors.New("operation rate limited by CA provider")

+ var KeyTestCases = []KeyTestCase

+ func AliLoginDataGen(authMethod *structs.VaultAuthMethod) (map[string]any, error)

+ func ArLoginDataGen(authMethod *structs.VaultAuthMethod) (map[string]any, error)

+ func AzureLoginDataGen(authMethod *structs.VaultAuthMethod) (map[string]any, error)

+ func CreateVaultTokenWithAttrs(t testing.T, client *vaultapi.Client, attr *VaultTokenAttributes) string

+ func JwtLoginDataGen(authMethod *structs.VaultAuthMethod) (map[string]any, error)

+ func K8sLoginDataGen(authMethod *structs.VaultAuthMethod) (map[string]any, error)

+ func ParseAWSCAConfig(raw map[string]interface{}) (*structs.AWSCAProviderConfig, error)

+ func SkipIfVaultNotPresent(t testing.T)

+ type AWSLoginDataGenerator struct

+ func (g *AWSLoginDataGenerator) GenerateLoginData(authMethod *structs.VaultAuthMethod) (map[string]interface{}, error)

+ type AWSProvider struct

+ func NewAWSProvider(logger hclog.Logger) *AWSProvider

+ func (a *AWSProvider) ActiveLeafSigningCert() (string, error)

+ func (a *AWSProvider) Cleanup(providerTypeChange bool, otherConfig map[string]interface{}) error

+ func (a *AWSProvider) Configure(cfg ProviderConfig) error

+ func (a *AWSProvider) CrossSignCA(newCA *x509.Certificate) (string, error)

+ func (a *AWSProvider) GenerateCAChain() (string, error)

+ func (a *AWSProvider) GenerateIntermediateCSR() (string, string, error)

+ func (a *AWSProvider) SetIntermediate(intermediatePEM string, rootPEM string, _ string) error

+ func (a *AWSProvider) Sign(csr *x509.CertificateRequest) (string, error)

+ func (a *AWSProvider) SignIntermediate(csr *x509.CertificateRequest) (string, error)

+ func (a *AWSProvider) State() (map[string]string, error)

+ func (a *AWSProvider) SupportsCrossSigning() (bool, error)

+ type CAChainResult struct

+ IntermediatePEM string

+ PEM string

+ type CASigningKeyTypes struct

+ CSRKeyBits int

+ CSRKeyType string

+ Desc string

+ SigningKeyBits int

+ SigningKeyType string

+ func CASigningKeyTypeCases() []CASigningKeyTypes

+ type Compute struct

+ Name string

+ ResourceGroupName string

+ SubscriptionID string

+ VMScaleSetName string

type ConsulProvider

+ func TestConsulProvider(t testing.T, d ConsulProviderStateDelegate) *ConsulProvider

+ func (c *ConsulProvider) ActiveLeafSigningCert() (string, error)

+ func (c *ConsulProvider) GenerateCAChain() (string, error)

+ func (c *ConsulProvider) State() (map[string]string, error)

+ func (c *ConsulProvider) SupportsCrossSigning() (bool, error)

type ConsulProviderStateDelegate

+ ProviderState func(id string) (*structs.CAConsulProviderState, error)

+ type KeyTestCase struct

+ Desc string

+ KeyBits int

+ KeyType string

+ type LoginDataGeneratorFn func(authMethod *structs.VaultAuthMethod) (map[string]any, error)

type MockProvider

+ func NewMockProvider(t mockConstructorTestingTNewMockProvider) *MockProvider

+ func (_m *MockProvider) ActiveLeafSigningCert() (string, error)

+ func (_m *MockProvider) GenerateCAChain() (string, error)

+ func (_m *MockProvider) State() (map[string]string, error)

+ func (_m *MockProvider) SupportsCrossSigning() (bool, error)

+ type NeedsStop interface

+ Stop func()

+ type PrimaryProvider interface

+ CrossSignCA func(*x509.Certificate) (string, error)

+ GenerateCAChain func() (string, error)

+ SignIntermediate func(*x509.CertificateRequest) (string, error)

+ SupportsCrossSigning func() (bool, error)

+ type PrimaryUsesIntermediate interface

+ GenerateLeafSigningCert func() (string, error)

type Provider

+ ActiveLeafSigningCert func() (string, error)

+ State func() (map[string]string, error)

+ type ProviderConfig struct

+ ClusterID string

+ Datacenter string

+ IsPrimary bool

+ RawConfig map[string]interface{}

+ State map[string]string

+ type SecondaryProvider interface

+ GenerateIntermediateCSR func() (string, string, error)

+ SetIntermediate func(intermediatePEM, rootPEM, opaque string) error

+ type TestVaultServer struct

+ Addr string

+ RootToken string

+ func NewTestVaultServer(t testing.T) *TestVaultServer

+ func (v *TestVaultServer) Client() *vaultapi.Client

+ func (v *TestVaultServer) Stop() error

+ func (v *TestVaultServer) WaitUntilReady(t testing.T)

+ type VaultAuthClient struct

+ AuthMethod *structs.VaultAuthMethod

+ LoginDataGen LoginDataGeneratorFn

+ LoginPath string

+ func NewAWSAuthClient(authMethod *structs.VaultAuthMethod) *VaultAuthClient

+ func NewAliCloudAuthClient(authMethod *structs.VaultAuthMethod) (*VaultAuthClient, error)

+ func NewAppRoleAuthClient(authMethod *structs.VaultAuthMethod) (*VaultAuthClient, error)

+ func NewAzureAuthClient(authMethod *structs.VaultAuthMethod) (*VaultAuthClient, error)

+ func NewJwtAuthClient(authMethod *structs.VaultAuthMethod) (*VaultAuthClient, error)

+ func NewK8sAuthClient(authMethod *structs.VaultAuthMethod) (*VaultAuthClient, error)

+ func NewVaultAPIAuthClient(authMethod *structs.VaultAuthMethod, loginPath string) *VaultAuthClient

+ func (c *VaultAuthClient) Login(ctx context.Context, client *api.Client) (*api.Secret, error)

+ type VaultAuthenticator interface

+ Login func(ctx context.Context, client *api.Client) (*api.Secret, error)

+ func NewGCPAuthClient(authMethod *structs.VaultAuthMethod) (VaultAuthenticator, error)

type VaultProvider

+ func (v *VaultProvider) ActiveLeafSigningCert() (string, error)

+ func (v *VaultProvider) GenerateCAChain() (string, error)

+ func (v *VaultProvider) GenerateLeafSigningCert() (string, error)

+ func (v *VaultProvider) State() (map[string]string, error)

+ func (v *VaultProvider) Stop()

+ func (v *VaultProvider) SupportsCrossSigning() (bool, error)

+ func (v *VaultProvider) ValidateConfigUpdate(prevRaw, nextRaw map[string]interface{}) error

+ type VaultTokenAttributes struct

+ ConsulManaged bool

+ CustomRules string

+ IntermediatePath string

+ RootPath string

+ VaultManaged bool

+ WithSudo bool

+ func (a *VaultTokenAttributes) DisplayName() string

+ func (a *VaultTokenAttributes) Rules(t testing.T) string

Jan 23, 2019

Changes in this version

+ type MockProvider struct

+ func (_m *MockProvider) ActiveIntermediate() (string, error)

+ func (_m *MockProvider) ActiveRoot() (string, error)

+ func (_m *MockProvider) Cleanup() error

+ func (_m *MockProvider) Configure(clusterId string, isRoot bool, rawConfig map[string]interface{}) error

+ func (_m *MockProvider) CrossSignCA(_a0 *x509.Certificate) (string, error)

+ func (_m *MockProvider) GenerateIntermediate() (string, error)

+ func (_m *MockProvider) GenerateIntermediateCSR() (string, error)

+ func (_m *MockProvider) GenerateRoot() error

+ func (_m *MockProvider) SetIntermediate(intermediatePEM string, rootPEM string) error

+ func (_m *MockProvider) Sign(_a0 *x509.CertificateRequest) (string, error)

+ func (_m *MockProvider) SignIntermediate(_a0 *x509.CertificateRequest) (string, error)

Oct 11, 2018

Changes in this version

+ var ErrNotInitialized = errors.New("provider not initialized")

type ConsulProvider

+ Delegate ConsulProviderStateDelegate

+ func (c *ConsulProvider) Configure(clusterID string, isRoot bool, rawConfig map[string]interface{}) error

+ func (c *ConsulProvider) GenerateIntermediateCSR() (string, error)

+ func (c *ConsulProvider) GenerateRoot() error

+ func (c *ConsulProvider) SetIntermediate(intermediatePEM, rootPEM string) error

+ func (c *ConsulProvider) SignIntermediate(csr *x509.CertificateRequest) (string, error)

type Provider

+ Configure func(clusterId string, isRoot bool, rawConfig map[string]interface{}) error

+ GenerateIntermediateCSR func() (string, error)

+ GenerateRoot func() error

+ SetIntermediate func(intermediatePEM, rootPEM string) error

+ SignIntermediate func(*x509.CertificateRequest) (string, error)

type VaultProvider

+ func (v *VaultProvider) Configure(clusterId string, isRoot bool, rawConfig map[string]interface{}) error

+ func (v *VaultProvider) GenerateIntermediateCSR() (string, error)

+ func (v *VaultProvider) GenerateRoot() error

+ func (v *VaultProvider) SetIntermediate(intermediatePEM, rootPEM string) error

+ func (v *VaultProvider) SignIntermediate(csr *x509.CertificateRequest) (string, error)

Jun 25, 2018

Changes in this version

+ const VaultCALeafCertRole

+ var ErrBackendNotInitialized = fmt.Errorf("backend not initialized")

+ var ErrBackendNotMounted = fmt.Errorf("backend not mounted")

+ func ParseConsulCAConfig(raw map[string]interface{}) (*structs.ConsulCAProviderConfig, error)

+ func ParseDurationFunc() mapstructure.DecodeHookFunc

+ func ParseVaultCAConfig(raw map[string]interface{}) (*structs.VaultCAProviderConfig, error)

+ func Uint8ToString(bs []uint8) string

+ type ConsulProvider struct

+ func NewConsulProvider(rawConfig map[string]interface{}, delegate ConsulProviderStateDelegate) (*ConsulProvider, error)

+ func (c *ConsulProvider) ActiveIntermediate() (string, error)

+ func (c *ConsulProvider) ActiveRoot() (string, error)

+ func (c *ConsulProvider) Cleanup() error

+ func (c *ConsulProvider) CrossSignCA(cert *x509.Certificate) (string, error)

+ func (c *ConsulProvider) GenerateIntermediate() (string, error)

+ func (c *ConsulProvider) Sign(csr *x509.CertificateRequest) (string, error)

+ type ConsulProviderStateDelegate interface

+ ApplyCARequest func(*structs.CARequest) error

+ State func() *state.Store

+ type Provider interface

+ ActiveIntermediate func() (string, error)

+ ActiveRoot func() (string, error)

+ Cleanup func() error

+ CrossSignCA func(*x509.Certificate) (string, error)

+ GenerateIntermediate func() (string, error)

+ Sign func(*x509.CertificateRequest) (string, error)

+ type VaultProvider struct

+ func NewVaultProvider(rawConfig map[string]interface{}, clusterId string) (*VaultProvider, error)

+ func (v *VaultProvider) ActiveIntermediate() (string, error)

+ func (v *VaultProvider) ActiveRoot() (string, error)

+ func (v *VaultProvider) Cleanup() error

+ func (v *VaultProvider) CrossSignCA(cert *x509.Certificate) (string, error)

+ func (v *VaultProvider) GenerateIntermediate() (string, error)

+ func (v *VaultProvider) Sign(csr *x509.CertificateRequest) (string, error)