server

package

Go to main page

Versions in this module

v0

v0.6.2

Nov 2, 2022

v0.6.1

Sep 3, 2022

Changes in this version

+ type V1API interface

+ GetHandler func(r *http.Request) http.HandlerFunc

+ func NewV1API(server *Server) V1API

v0.6.0

Sep 3, 2022

Changes in this version

+ const CodeBadRequest

+ const CodeInternalError

+ const CodeNoContent

+ const SelfSignedCertKey

+ var ErrCertificateIsExpired = errors.New("certificate is expired")

+ var ErrGetCertificate = errors.New("cannot get certificate")

+ var ErrInvalidDomainName = errors.New("invalid domain name")

+ var ErrMarshalCertificate = errors.New("cannot marshal certificate")

+ var ErrOCSPStaplingNotCached = errors.New("OCSP stapling not cached")

+ var ErrOCSPStaplingNotSupported = errors.New("OCSP stapling not supported")

+ var ErrUnknownCertificateType = errors.New("unknown certificate type")

+ func NewDNSSolver(credential *config.DNSCredential) (*dnsSolver, error)

+ type ACMEManager interface

+ GetNamedCertificate func(ctx context.Context, name string, createIfNotCached bool) (*tls.Certificate, error)

+ GetOnDemandCertificate func(ctx context.Context, domain string, createIfNotCached bool) (*tls.Certificate, error)

+ func NewACMEManager(cfg *config.Config, storMgr StorageManager, ocsp OCSPManager, ...) ACMEManager

+ type CertFunc = func() (*tls.Certificate, error)

+ type HTTPAndTLSALPNSolver interface

+ GetALPNCertificate func(token string) (*tls.Certificate, error)

+ HandleACMEChallenge func(w http.ResponseWriter, r *http.Request)

+ func NewHTTPAndTLSALPNSolver() HTTPAndTLSALPNSolver

+ type HttpAPI interface

+ GetHandler func(r *http.Request) http.HandlerFunc

+ func NewHttpAPI(server *Server) HttpAPI

type ManagedCertManager

+ GetCertificate func(ctx context.Context, name string) (*tls.Certificate, error)

+ type Mux struct

+ func NewMux(server *Server) (*Mux, error)

+ func (m *Mux) ServeHTTP(w http.ResponseWriter, r *http.Request)

type OCSPManager

+ NotifyCertChange func(key string, getCert CertFunc)

+ type SelfSignedManager interface

+ GetCertificate func(ctx context.Context) (*tls.Certificate, error)

+ IsSelfSigned func(fp string) bool

+ func NewSelfSignedManager(cfg *config.Config, storage StorageManager) SelfSignedManager

type Server

+ func (p *Server) GetCertificate(ctx context.Context, req *pb.GetCertificateRequest) (*pb.GetCertificateResponse, error)

+ func (p *Server) GetOCSPStapling(ctx context.Context, req *pb.GetOCSPStaplingRequest) (*pb.GetOCSPStaplingResponse, error)

+ type Storage interface

+ Delete func(ctx context.Context, key string) error

+ Get func(ctx context.Context, key string) (data []byte, err error)

+ Put func(ctx context.Context, key string, data []byte) error

type StorageManager

+ GetAccountPrivateKey func(ctx context.Context, email string) ([]byte, error)

+ LoadCertificate func(ctx context.Context, certTyp pb.Certificate_Type, key string) (cert *tls.Certificate, pubKey, privKey []byte, err error)

+ SaveAccountPrivateKey func(ctx context.Context, email string, data []byte) error

+ SaveCertificate func(ctx context.Context, certTyp pb.Certificate_Type, key string, ...) error

v0.5.0

Jun 12, 2022

Changes in this version

+ const StorageTypeDirCache

+ const StorageTypeRedis

+ const Wildcard

+ var ErrCacheMiss = autocert.ErrCacheMiss

+ var ErrOCSPNotSupported = errors.New("OCSP stapling is not supported")

+ var ErrOCSPStateNotCached = errors.New("OCSP state is not cached")

+ func IsSelfSignedCertificate(fingerprint string) bool

+ type AutocertManager struct

+ func NewAutocertManager(cfg *Config, ocspMgr *OCSPManager) *AutocertManager

+ func (m *AutocertManager) GetACMEAccount(ctx context.Context) (*acme.Account, *ecdsa.PrivateKey, error)

+ func (m *AutocertManager) GetAutocertALPN01Certificate(name string) (*tls.Certificate, error)

+ func (m *AutocertManager) GetAutocertCertificate(name string) (*tls.Certificate, error)

+ func (m *AutocertManager) GetCachedCertificate(name string) (*tls.Certificate, error)

+ func (m *AutocertManager) KeyName(domain string) string

+ func (m *AutocertManager) OCSPKeyName(domain string) string

+ type Config struct

+ LetsEncrypt struct{ ... }

+ Listen string

+ Managed []struct{ ... }

+ PIDFile string

+ SelfSigned struct{ ... }

+ Storage struct{ ... }

+ Wildcard struct{ ... }

+ func (p *Config) CheckWildcardDomain(name string) *wildcardItem

+ func (p *Config) IsManagedDomain(domain string) (certKey string, ok bool)

+ func (p *Config) IsSelfSignedAllowed(domain string) bool

+ func (p *Config) IsWildcardDomain(domain string) (item *wildcardItem, ok bool)

+ type ManagedCertManager struct

+ func NewManagedCertManager(stor *StorageManager, ocspMgr *OCSPManager) *ManagedCertManager

+ func (p *ManagedCertManager) Get(certKey string) (*tls.Certificate, error)

+ func (p *ManagedCertManager) OCSPKeyName(certKey string) string

type OCSPManager

+ func (m *OCSPManager) GetOCSPStapling(keyName string, fingerprint string, ...) ([]byte, time.Time, error)

+ func (m *OCSPManager) IsCertificateCached(keyName string) bool

+ func (m *OCSPManager) Watch(keyName string, certfunc func() (*tls.Certificate, error))

+ type Opts struct

+ ConfigFile string

+ type Server struct

+ func NewServer(cfg *Config) (*Server, error)

+ func (p *Server) BuildRoutes(mux *http.ServeMux)

+ func (p *Server) GetCertificateByName(name string) (tlscert *tls.Certificate, certType int, err error)

+ func (p *Server) GetOCSPStaplingByName(name string, fingerprint string) ([]byte, time.Time, error)

+ func (p *Server) GetSelfSignedCertificate() (*tls.Certificate, error)

+ func (p *Server) HandleCertificate(w http.ResponseWriter, r *http.Request)

+ func (p *Server) HandleOCSPStapling(w http.ResponseWriter, r *http.Request)

+ type StorageManager struct

+ func NewStorageManager(cfg *Config) *StorageManager

+ func (p *StorageManager) LoadCertificateFromStore(certKey string) (tlscert *tls.Certificate, keyPEM, certPEM []byte, err error)

+ func (p *StorageManager) SaveCertificateToStore(certKey string, privPEM, pubPEM []byte) error

+ type WildcardManager struct

+ func NewWildcardManager(cfg *Config, stor *StorageManager, ocspMgr *OCSPManager, legoApp *lego.App) *WildcardManager

+ func (p *WildcardManager) Get(item *wildcardItem, issueIfNotCached bool) (*tls.Certificate, error)

v0.4.3

May 17, 2022

v0.4.2

Jun 2, 2021

Changes in this version

+ func NewOCSPManager() *ocspManager

v0.4.1

Aug 21, 2020

Changes in this version

+ const ALPNCert

+ var RspErrMarshalCertificate = []byte("Error marshal certificate.")

type Manager

+ func (m *Manager) GetAutocertALPN01Certificate(name string) (*tls.Certificate, error)

+ func (m *Manager) GetAutocertCertificate(name string) (*tls.Certificate, error)

v0.4.0

Aug 16, 2020

Changes in this version

+ const LetsEncrypt

+ const Managed

+ const SelfSigned

+ var Cfg = &config

+ var DefaultSelfSignedOrganization = []string

+ var ErrCertfuncNotFound = errors.New("certificate func not found")

+ var ErrHostNotPermitted = errors.New("host not permitted")

+ var ErrStaplingNotCached = errors.New("OCSP stapling is not cached")

+ var Flags struct

+ var OCSPManager = &ocspManager

+ var RspCertificateIsExpired = []byte("Certificate is expired.")

+ var RspErrEncodeCertificate = []byte("Error encode certificate.")

+ var RspErrGetCertificate = []byte("Error getting certificate.")

+ var RspHostNotPermitted = []byte("Host name not permitted.")

+ var RspInvalidDomainName = []byte("Invalid domain name.")

+ func CreateSelfSignedCertificate(validDays int, organization []string) (certPEM, privKeyPEM []byte, err error)

+ func EncodeECDSAKey(w io.Writer, key *ecdsa.PrivateKey) error

+ func EncodeRSAKey(w io.Writer, key *rsa.PrivateKey) error

+ func FlushLogs()

+ func GetManagedCertificate(certKey string) (*tls.Certificate, error)

+ func GetSelfSignedCertificate() (*tls.Certificate, error)

+ func HostWhitelist(hosts ...string) autocert.HostPolicy

+ func InitConfig()

+ func InitFlags()

+ func IsManagedDomain(domain string) (certKey string, ok bool)

+ func IsSelfSignedAllowed(domain string) bool

+ func NewDirCache(cacheDir string) (autocert.Cache, error)

+ func NewRedisCache(redisURL string) (autocert.Cache, error)

+ func RegexpWhitelist(patterns ...*regexp.Regexp) autocert.HostPolicy

+ type Manager struct

+ ForceRSA bool

+ func GetManager() *Manager

+ func (m *Manager) BuildRoutes(mux *http.ServeMux)

+ func (m *Manager) GetCertificate(name string) (*tls.Certificate, error)

+ func (m *Manager) GetCertificateByName(name string) (tlscert *tls.Certificate, certType int, err error)

+ func (m *Manager) GetOCSPStaplingByName(name string, fingerprint string) ([]byte, time.Time, error)

+ func (m *Manager) HandleCertificate(w http.ResponseWriter, r *http.Request)

+ func (m *Manager) HandleOCSPStapling(w http.ResponseWriter, r *http.Request)

+ func (m *Manager) KeyName(domain string) string

+ func (m *Manager) OCSPKeyName(domain string) string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL