signatures

Documentation

Index

• func CheckArtifactSignatureIsValid(fs types.KairosFS, artifact string, logger types.KairosLogger) error
• func ExtractCertsFromSignatureDatabase(database *signature.SignatureDatabase) []*x509.Certificate
• func GetAllCerts() (types.CertList, error)
• func GetAllFullCerts() (types.CertListFull, error)
• func GetKeyDatabase(sigType string) (*signature.SignatureDatabase, error)

Functions

func CheckArtifactSignatureIsValid

func CheckArtifactSignatureIsValid(fs types.KairosFS, artifact string, logger types.KairosLogger) error

CheckArtifactSignatureIsValid checks that a given efi artifact is signed properly with a signature that would allow it to boot correctly in the current node if secureboot is enabled

func ExtractCertsFromSignatureDatabase

func ExtractCertsFromSignatureDatabase(database *signature.SignatureDatabase) []*x509.Certificate

ExtractCertsFromSignatureDatabase returns a []*x509.Certificate from a *signature.SignatureDatabase

func GetAllCerts

func GetAllCerts() (types.CertList, error)

GetAllCerts returns a list of certs in the system

func GetAllFullCerts

func GetAllFullCerts() (types.CertListFull, error)

GetAllFullCerts returns a list of certs in the system. Full cert, including raw data of the cert

func GetKeyDatabase

func GetKeyDatabase(sigType string) (*signature.SignatureDatabase, error)

GetKeyDatabase returns a single signature.SignatureDatabase for a given type