cert

Documentation

Index

• func BootstrapCertificates(authOptions *auth.Options) error
• func GenerateCACertificate(certFile, keyFile, org string, bits int) error
• func GenerateCert(hosts []string, certFile, keyFile, caFile, caKeyFile, org string, bits int) error
• func ReadTLSConfig(addr string, authOptions *auth.Options) (*tls.Config, error)
• func SetCertGenerator(cg Generator)
• func ValidateCertificate(addr string, authOptions *auth.Options) (bool, error)
• type Generator
  • func NewX509CertGenerator() Generator
• type PathInfo
• type X509CertGenerator
  • func (xcg *X509CertGenerator) GenerateCACertificate(certFile, keyFile, org string, bits int) error
  • func (xcg *X509CertGenerator) GenerateCert(hosts []string, certFile, keyFile, caFile, caKeyFile, org string, bits int) error
  • func (xcg *X509CertGenerator) ReadTLSConfig(addr string, authOptions *auth.Options) (*tls.Config, error)
  • func (xcg *X509CertGenerator) ValidateCertificate(addr string, authOptions *auth.Options) (bool, error)

Functions

func BootstrapCertificates

func BootstrapCertificates(authOptions *auth.Options) error

func GenerateCACertificate

func GenerateCACertificate(certFile, keyFile, org string, bits int) error

func GenerateCert

func GenerateCert(hosts []string, certFile, keyFile, caFile, caKeyFile, org string, bits int) error

func ReadTLSConfig

func ReadTLSConfig(addr string, authOptions *auth.Options) (*tls.Config, error)

func SetCertGenerator

func SetCertGenerator(cg Generator)

func ValidateCertificate

func ValidateCertificate(addr string, authOptions *auth.Options) (bool, error)

Types

type Generator

type Generator interface {
	GenerateCACertificate(certFile, keyFile, org string, bits int) error
	GenerateCert(hosts []string, certFile, keyFile, caFile, caKeyFile, org string, bits int) error
	ReadTLSConfig(addr string, authOptions *auth.Options) (*tls.Config, error)
	ValidateCertificate(addr string, authOptions *auth.Options) (bool, error)
}

func NewX509CertGenerator

func NewX509CertGenerator() Generator

type PathInfo

type PathInfo struct {
	CaCertPath       string
	CaPrivateKeyPath string
	ClientCertPath   string
	ClientKeyPath    string
	ServerCertPath   string
	ServerKeyPath    string
}

type X509CertGenerator

type X509CertGenerator struct{}

func (*X509CertGenerator) GenerateCACertificate

func (xcg *X509CertGenerator) GenerateCACertificate(certFile, keyFile, org string, bits int) error

GenerateCACertificate generates a new certificate authority from the specified org and bit size and stores the resulting certificate and key file in the arguments.

func (*X509CertGenerator) GenerateCert

func (xcg *X509CertGenerator) GenerateCert(hosts []string, certFile, keyFile, caFile, caKeyFile, org string, bits int) error

GenerateCert generates a new certificate signed using the provided certificate authority files and stores the result in the certificate file and key provided. The provided host names are set to the appropriate certificate fields.

func (*X509CertGenerator) ReadTLSConfig

func (xcg *X509CertGenerator) ReadTLSConfig(addr string, authOptions *auth.Options) (*tls.Config, error)

ReadTLSConfig reads the tls config for a machine.

func (*X509CertGenerator) ValidateCertificate

func (xcg *X509CertGenerator) ValidateCertificate(addr string, authOptions *auth.Options) (bool, error)

ValidateCertificate validate the certificate installed on the vm.