ca

Documentation

Overview

Copyright IBM Corp. All Rights Reserved.

SPDX-License-Identifier: Apache-2.0

Index

• func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)
• func LoadCertificateGMSM2(certPath string) (*sm2.Certificate, error)
• type CA
  • func NewCA(...) (*CA, error)
  • func (ca *CA) SignCertificate(baseDir, name string, orgUnits, alternateNames []string, pub *sm2.PublicKey, ...) (*sm2.Certificate, error)

Functions

func LoadCertificateECDSA

func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)

LoadCertificateECDSA load a ecdsa cert from a file in cert path

func LoadCertificateGMSM2

func LoadCertificateGMSM2(certPath string) (*sm2.Certificate, error)

LoadCertificateGMSM2 load a ecdsa cert from a file in cert path

Types

type CA

type CA struct {
	Name               string
	Country            string
	Province           string
	Locality           string
	OrganizationalUnit string
	StreetAddress      string
	PostalCode         string
	Signer             crypto.Signer
	SignCert           *x509.Certificate
	SignSm2Cert        *sm2.Certificate
	Sm2Key             bccsp.Key
}

func NewCA

func NewCA(
	baseDir,
	org,
	name,
	country,
	province,
	locality,
	orgUnit,
	streetAddress,
	postalCode string,
) (*CA, error)

NewCA creates an instance of CA and saves the signing key pair in baseDir/name

func (*CA) SignCertificate

func (ca *CA) SignCertificate(
	baseDir,
	name string,
	orgUnits,
	alternateNames []string,
	pub *sm2.PublicKey,
	ku x509.KeyUsage,
	eku []x509.ExtKeyUsage,
) (*sm2.Certificate, error)

SignCertificate creates a signed certificate based on a built-in template and saves it in baseDir/name