certMgr

Documentation

Index

• Variables
• type AppConfig
• type BackendConfig

Variables

var (
	DefaultAppConfig = &AppConfig{
		CertFilename:       "cert.pem",
		KeyFilename:        "key.pem",
		Config:             "",
		HTTPListenAddress:  ":8443",
		GRPCListenAddress:  ":50051",
		AuthServiceAddress: "auth.dstcorp.net:443",
		Insecure:           false,
		Verbose:            false,
		Backend:            defaultBackendConfig,
	}
)

the default configuration

Types

type AppConfig

type AppConfig struct {
	Certificate        string // the pem-encoded certificate for the service
	CertFilename       string // the name of the file containing the pem-encoded certicate for the service
	Insecure           bool   // for testing purposes, do not start-up TLS endpoints
	KeyFilename        string // the name of the file containing the pem-encoded key for the service's cert
	Config             string // load config data from this file (may be a url)
	HTTPListenAddress  string
	GRPCListenAddress  string
	AuthServiceAddress string
	Verbose            bool

	// specific config options for each command & subcommand
	Backend BackendConfig
}

AppConfig provides the global configuration of the application.

type BackendConfig

type BackendConfig struct {
	AuthorizedCreators   []string // users authorized to create new certificates (an empty list permits anyone)
	Bundle               string   // the pem-encoded bundle of intermediate CA's
	SigningCACertificate string   // the pem-encoded signing CA
	SigningCAKeyFilename string   // filename for the CA key
	MaxDuration          int      // maximum # of days this CA will issue a cert
}