certmagic

Feb 24, 2020

Changes in this version

+ const ED25519

+ const P256

+ const P384

+ const RSA2048

+ const RSA4096

+ const RSA8192

+ var AttemptsCtxKey retryStateCtxKey

+ var DefaultACME = ACMEManager

+ var DefaultKeyGenerator = StandardKeyGenerator

+ var RateLimitEvents = 10

+ var RateLimitEventsWindow = 1 * time.Minute

+ type ACMEManager struct

+ Agreed bool

+ AltHTTPPort int

+ AltTLSALPNPort int

+ CA string

+ CertObtainTimeout time.Duration

+ DNSChallengeOption dns01.ChallengeOption

+ DNSProvider challenge.Provider

+ DisableHTTPChallenge bool

+ DisableTLSALPNChallenge bool

+ Email string

+ ListenHost string

+ TestCA string

+ TrustedRoots *x509.CertPool

+ func NewACMEManager(cfg *Config, template ACMEManager) *ACMEManager

+ func (am *ACMEManager) HTTPChallengeHandler(h http.Handler) http.Handler

+ func (am *ACMEManager) HandleHTTPChallenge(w http.ResponseWriter, r *http.Request) bool

+ func (am *ACMEManager) Issue(ctx context.Context, csr *x509.CertificateRequest) (*IssuedCertificate, error)

+ func (am *ACMEManager) IssuerKey() string

+ func (am *ACMEManager) PreCheck(names []string, interactive bool) (skip bool, err error)

+ func (am *ACMEManager) Revoke(ctx context.Context, cert CertificateResource) error

+ type CertificateResource struct

+ CertificatePEM []byte

+ IssuerData interface{}

+ PrivateKeyPEM []byte

+ SANs []string

+ func (cr *CertificateResource) NamesKey() string

type Config

+ Issuer Issuer

+ KeySource KeyGenerator

+ Revoker Revoker

+ type ErrNoRetry struct

+ Err error

+ func (e ErrNoRetry) Error() string

+ func (e ErrNoRetry) Unwrap() error

+ type IssuedCertificate struct

+ Certificate []byte

+ Metadata interface{}

+ type Issuer interface

+ Issue func(ctx context.Context, request *x509.CertificateRequest) (*IssuedCertificate, error)

+ IssuerKey func() string

type KeyBuilder

+ func (keys KeyBuilder) CertsPrefix(issuerKey string) string

+ func (keys KeyBuilder) CertsSitePrefix(issuerKey, domain string) string

+ type KeyGenerator interface

+ GenerateKey func() (crypto.PrivateKey, error)

+ type KeyType string

+ type PreChecker interface

+ PreCheck func(names []string, interactive bool) (skip bool, err error)

+ type Revoker interface

+ Revoke func(ctx context.Context, cert CertificateResource) error

+ type StandardKeyGenerator struct

+ KeyType KeyType

+ func (kg StandardKeyGenerator) GenerateKey() (crypto.PrivateKey, error)

Dec 17, 2019

Changes in this version

type RingBufferRateLimiter

+ func (r *RingBufferRateLimiter) Stop()

Oct 21, 2019

Changes in this version

type RingBufferRateLimiter

+ func (r *RingBufferRateLimiter) MaxEvents() int

+ func (r *RingBufferRateLimiter) Window() time.Duration

Oct 21, 2019

Changes in this version

+ var RateLimitOrders = 300

+ var RateLimitOrdersWindow = 3 * time.Hour

type Config

+ DNSChallengeOption dns01.ChallengeOption

+ type RingBufferRateLimiter struct

+ func NewRateLimiter(maxEvents int, window time.Duration) *RingBufferRateLimiter

+ func (r *RingBufferRateLimiter) Allow() bool

+ func (r *RingBufferRateLimiter) SetMaxEvents(maxEvents int)

+ func (r *RingBufferRateLimiter) SetWindow(window time.Duration)

+ func (r *RingBufferRateLimiter) Wait()

Oct 16, 2019

Changes in this version

+ func ManageAsync(ctx context.Context, domainNames []string) error

+ func ManageSync(domainNames []string) error

type Config

+ func (cfg *Config) ManageAsync(ctx context.Context, domainNames []string) error

+ func (cfg *Config) ManageSync(domainNames []string) error

Sep 18, 2019

Changes in this version

type Config

+ TrustedRoots *x509.CertPool

Sep 17, 2019

Changes in this version

type CleanStorageOptions

+ ExpiredCertGracePeriod time.Duration

+ ExpiredCerts bool

Sep 13, 2019

Changes in this version

type Cache

+ func (certCache *Cache) AllMatchingCertificates(name string) []Certificate

Aug 9, 2019

Changes in this version

type Cache

+ func (certCache *Cache) CertificatesWithSAN(san string) []Certificate

type CertMetadata

+ Tags []string

+ func (cm CertMetadata) HasTag(tag string) bool

Jun 19, 2019

Changes in this version

+ func CleanUpOwnLocks()

Jun 5, 2019

Changes in this version

+ type CertMetadata struct

+ PublicKeyAlgorithm x509.PublicKeyAlgorithm

+ SerialNumber *big.Int

+ Subject pkix.Name

+ type CertificateSelector interface

+ SelectCertificate func(*tls.ClientHelloInfo, []Certificate) (Certificate, error)

type Config

+ CertSelection CertificateSelector

Apr 29, 2019

Changes in this version

+ func LooksLikeHTTPChallenge(r *http.Request) bool

Apr 20, 2019

Changes in this version

+ const DefaultOCSPCheckInterval

+ const DefaultRenewCheckInterval

+ const DefaultRenewDurationBefore

+ const DefaultRenewDurationBeforeAtStartup

+ const HTTPChallengePort

+ const LetsEncryptProductionCA

+ const LetsEncryptStagingCA

+ const TLSALPNChallengePort

+ var Default = Config

+ var HTTPPort = 80

+ var HTTPSPort = 443

+ var HTTPTimeout = 30 * time.Second

+ var UserAgent string

+ func CleanStorage(storage Storage, opts CleanStorageOptions)

+ func HTTPS(domainNames []string, mux http.Handler) error

+ func HostQualifies(hostname string) bool

+ func Listen(domainNames []string) (net.Listener, error)

+ func Manage(domainNames []string) error

+ func NormalizedName(serverName string) string

+ func TLS(domainNames []string) (*tls.Config, error)

+ type Cache struct

+ func NewCache(opts CacheOptions) *Cache

+ func (certCache *Cache) RenewManagedCertificates(interactive bool) error

+ func (certCache *Cache) Stop()

+ type CacheOptions struct

+ GetConfigForCert ConfigGetter

+ OCSPCheckInterval time.Duration

+ RenewCheckInterval time.Duration

+ type Certificate struct

+ Hash string

+ Names []string

+ NotAfter time.Time

+ OCSP *ocsp.Response

+ func (cert Certificate) NeedsRenewal(cfg *Config) bool

+ type CleanStorageOptions struct

+ OCSPStaples bool

+ type Config struct

+ Agreed bool

+ AltHTTPPort int

+ AltTLSALPNPort int

+ CA string

+ CertObtainTimeout time.Duration

+ DNSProvider challenge.Provider

+ DefaultServerName string

+ DisableHTTPChallenge bool

+ DisableTLSALPNChallenge bool

+ Email string

+ KeyType certcrypto.KeyType

+ ListenHost string

+ MustStaple bool

+ NewManager func(interactive bool) (Manager, error)

+ OnDemand *OnDemandConfig

+ OnEvent func(event string, data interface{})

+ RenewDurationBefore time.Duration

+ RenewDurationBeforeAtStartup time.Duration

+ Storage Storage

+ func New(certCache *Cache, cfg Config) *Config

+ func NewDefault() *Config

+ func (cfg *Config) CacheManagedCertificate(domain string) (Certificate, error)

+ func (cfg *Config) CacheUnmanagedCertificatePEMBytes(certBytes, keyBytes []byte) error

+ func (cfg *Config) CacheUnmanagedCertificatePEMFile(certFile, keyFile string) error

+ func (cfg *Config) CacheUnmanagedTLSCertificate(tlsCert tls.Certificate) error

+ func (cfg *Config) GetCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (cfg *Config) HTTPChallengeHandler(h http.Handler) http.Handler

+ func (cfg *Config) HandleHTTPChallenge(w http.ResponseWriter, r *http.Request) bool

+ func (cfg *Config) Manage(domainNames []string) error

+ func (cfg *Config) ObtainCert(name string, interactive bool) error

+ func (cfg *Config) RenewCert(name string, interactive bool) error

+ func (cfg *Config) RevokeCert(domain string, interactive bool) error

+ func (cfg *Config) TLSConfig() *tls.Config

+ type ConfigGetter func(Certificate) (Config, error)

+ type ErrNotExist interface

+ type FileStorage struct

+ Path string

+ func (fs *FileStorage) Delete(key string) error

+ func (fs *FileStorage) Exists(key string) bool

+ func (fs *FileStorage) Filename(key string) string

+ func (fs *FileStorage) List(prefix string, recursive bool) ([]string, error)

+ func (fs *FileStorage) Load(key string) ([]byte, error)

+ func (fs *FileStorage) Lock(key string) error

+ func (fs *FileStorage) Stat(key string) (KeyInfo, error)

+ func (fs *FileStorage) Store(key string, value []byte) error

+ func (fs *FileStorage) String() string

+ func (fs *FileStorage) Unlock(key string) error

+ type KeyBuilder struct

+ var StorageKeys KeyBuilder

+ func (keys KeyBuilder) CAPrefix(ca string) string

+ func (keys KeyBuilder) OCSPStaple(cert *Certificate, pemBundle []byte) string

+ func (keys KeyBuilder) Safe(str string) string

+ func (keys KeyBuilder) SiteCert(ca, domain string) string

+ func (keys KeyBuilder) SiteMeta(ca, domain string) string

+ func (keys KeyBuilder) SitePrefix(ca, domain string) string

+ func (keys KeyBuilder) SitePrivateKey(ca, domain string) string

+ func (keys KeyBuilder) UserPrefix(ca, email string) string

+ func (keys KeyBuilder) UserPrivateKey(ca, email string) string

+ func (keys KeyBuilder) UserReg(ca, email string) string

+ func (keys KeyBuilder) UsersPrefix(ca string) string

+ type KeyInfo struct

+ IsTerminal bool

+ Key string

+ Modified time.Time

+ Size int64

+ type Locker interface

+ Lock func(key string) error

+ Unlock func(key string) error

+ type Manager interface

+ Obtain func(name string) error

+ Renew func(name string) error

+ Revoke func(name string) error

+ type OnDemandConfig struct

+ AskURL *url.URL

+ DecisionFunc func(name string) error

+ HostWhitelist []string

+ MaxObtain int32

+ func (o *OnDemandConfig) Allowed(name string) error

+ type Storage interface

+ Delete func(key string) error

+ Exists func(key string) bool

+ List func(prefix string, recursive bool) ([]string, error)

+ Load func(key string) ([]byte, error)

+ Stat func(key string) (KeyInfo, error)

+ Store func(key string, value []byte) error