keystores

Documentation

Overview

Package keystores contains logic for loading encryption keys from a keystores

Index

• Constants
• Variables
• type KeyStore
  • func NewKeyStoreFromConfig(config serverconfig.CryptoConfig) (KeyStore, error)
  • func NewKeyStoreFromMap(keys keysByID, fallbackID string) KeyStore

Constants

const LocalKeyStore = "local"

LocalKeyStore is the config value for an on-disk key store

Variables

var ErrUnknownKeyID = errors.New("unknown key id")

ErrUnknownKeyID is returned when the Key ID cannot be found by the keystore.

Types

type KeyStore

type KeyStore interface {
	// GetKey retrieves the key for the specified algorithm by key ID.
	GetKey(id string) ([]byte, error)
}

KeyStore represents a struct which stores or can fetch encryption keys.

func NewKeyStoreFromConfig

func NewKeyStoreFromConfig(config serverconfig.CryptoConfig) (KeyStore, error)

NewKeyStoreFromConfig creates an instance of a KeyStore based on the AuthConfig in Minder. Since our only implementation is based on reading from the local disk, do all key loading during construction of the struct.

func NewKeyStoreFromMap

func NewKeyStoreFromMap(keys keysByID, fallbackID string) KeyStore

NewKeyStoreFromMap constructs a keystore from a map of key ID to key bytes. This is mostly useful for testing.