pki

package module
v0.0.0-...-151ea04 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 26, 2023 License: MIT Imports: 11 Imported by: 5

README

Pki

CircleCI Go Report Card GoDoc GitHub license

Inspiration

Cert generate via openssl could be convoluted. The defaults are also insecure at version 1. This library provide an easy way to generate and sign certificates. With secure defaults.

Example

package main

import (
	"fmt"
	"testing"
)

func TestSignCsr(t *testing.T) {
	csr, err := GenerateCertificateSigningRequest(GenerateCertificateSigningRequestInput{
		EmailAddresses:     []string{"foo@klin-pro.com"},
		RsaBits:            4096,
		Province:           []string{"CA"},
		Locality:           []string{"SF"},
		Organization:       []string{"klin-pro"},
		OrganizationalUnit: []string{"IT"},
		CommonName:         "pii-vault",
		DNSNames:           []string{""},
	})
	if err != nil {
		t.Errorf(err.Error())
	}
	ca, err := GenerateCaCertificate(GenerateCaCertificateInput{
		EmailAddresses: []string{"foo@klin-pro.com"},
		MaxDays:        30,
		RsaBits:        4096,
		Organization:   "klin-pro",
		DNSNames:       []string{"test1.klin-pro.com"},
	})
	if err != nil {
		t.Errorf(err.Error())
	}
	cert, err := SignCsr(SignCsrInput{
		IsCa:      true,
		CaCert:    ca.Cert,
		CaKey:     ca.Key,
		Csr:       csr.Csr,
		ValidDays: 2,
	})
	if err != nil {
		t.Errorf(err.Error())
	}
	fmt.Println(string(cert.Cert))
}

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type GenerateCaCertificateInput

type GenerateCaCertificateInput struct {
	EmailAddresses []string          // EmailAddresses
	EcdsaCurve     string            // EcdsaCurve specify this if you want EcsdasCurve, if you leave it blank it will default to RSA
	MaxDays        float64           // MaxDays
	RsaBits        int               // RsaBits
	Password       string            // Password
	Organization   string            // Orgnaization
	DNSNames       []string          // DNSNames The list of DNS names
	RawCertificate *x509.Certificate // RawCertificate alternative one can forgo all the params above and simply stick the raw certficiate to be generated
}

GenerateCaCertificateInput the input of the function.

type GenerateCaCertificateOutput

type GenerateCaCertificateOutput struct {
	Key  []byte
	Cert []byte
}

GenerateCaCertificateOutput the output of the function

func GenerateCaCertificate

GenerateCaCertificate the CA certificate

type GenerateCertificateSigningRequestInput

type GenerateCertificateSigningRequestInput struct {
	RsaBits               int                      // RsaBits
	Country               []string                 // Country
	Province              []string                 // Province
	Locality              []string                 // Locality
	EmailAddresses        []string                 // EmailAddresses
	Organization          []string                 // Orginzation
	OrganizationalUnit    []string                 // OrginzationUnit
	CommonName            string                   // CommonName
	DNSNames              []string                 // DnsNames
	Password              string                   // Password
	RawCertificateRequest *x509.CertificateRequest // RawCertificateRequest
}

GenerateCertificateSigningRequestInput the input for the function

type GenerateCertificateSigningRequestOutput

type GenerateCertificateSigningRequestOutput struct {
	Csr []byte // Csr
	Key []byte // Key
}

GenerateCertificateSigningRequestOutput the output for the function

type SignCsrInput

type SignCsrInput struct {
	CaCert    []byte // CaCert
	CaKey     []byte // CaKey
	Csr       []byte // Csr the certficiate request to sign
	IsCa      bool   // IsCa whether to sign the certificate as Certificate authority
	ValidDays int    // ValidDays
}

SignCsrInput the input of the function

type SignCsrOutput

type SignCsrOutput struct {
	Cert []byte
}

SignCsrOutput output of the function

func SignCsr

func SignCsr(g SignCsrInput) (SignCsrOutput, error)

SignCsr signs CSR

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL