Documentation ¶
Overview ¶
Package protocol is a generated protocol buffer package.
It is generated from these files:
protocol.proto
It has these top-level messages:
PingRequest PingResponse HostAuthRequest Error HostAuth ReplyMetadata HostAuthResponse HostCertRequest HostCertResponse UserAuthRequest UserAuthResponse UserCertRequest OauthToken UserCertResponse HostCA UserCA PublicTrustedCARequest PublicTrustedCAResponse
Index ¶
- func RegisterCertServer(s *grpc.Server, srv CertServer)
- type CertClient
- type CertServer
- type Error
- type HostAuth
- type HostAuthRequest
- type HostAuthResponse
- type HostCA
- func (*HostCA) Descriptor() ([]byte, []int)
- func (m *HostCA) GetId() uint64
- func (m *HostCA) GetPublicKey() []byte
- func (m *HostCA) GetValidFrom() *google_protobuf.Timestamp
- func (m *HostCA) GetValidUntil() *google_protobuf.Timestamp
- func (*HostCA) ProtoMessage()
- func (m *HostCA) Reset()
- func (m *HostCA) String() string
- type HostCertRequest
- func (*HostCertRequest) Descriptor() ([]byte, []int)
- func (m *HostCertRequest) GetHostMetadata() []byte
- func (m *HostCertRequest) GetHostnames() []string
- func (m *HostCertRequest) GetId() []byte
- func (m *HostCertRequest) GetPublicKey() []byte
- func (m *HostCertRequest) GetRequestTime() *google_protobuf.Timestamp
- func (m *HostCertRequest) GetValidFrom() *google_protobuf.Timestamp
- func (m *HostCertRequest) GetValidUntil() *google_protobuf.Timestamp
- func (*HostCertRequest) ProtoMessage()
- func (m *HostCertRequest) Reset()
- func (m *HostCertRequest) String() string
- type HostCertResponse
- func (*HostCertResponse) Descriptor() ([]byte, []int)
- func (m *HostCertResponse) GetHostCert() []byte
- func (m *HostCertResponse) GetMetadata() *ReplyMetadata
- func (m *HostCertResponse) GetTrustedUsersCACert() []byte
- func (*HostCertResponse) ProtoMessage()
- func (m *HostCertResponse) Reset()
- func (m *HostCertResponse) String() string
- type OauthToken
- func (*OauthToken) Descriptor() ([]byte, []int)
- func (m *OauthToken) GetAccessToken() string
- func (m *OauthToken) GetExpiry() *google_protobuf.Timestamp
- func (m *OauthToken) GetRefreshToken() string
- func (m *OauthToken) GetTokenType() string
- func (*OauthToken) ProtoMessage()
- func (m *OauthToken) Reset()
- func (m *OauthToken) String() string
- type PingRequest
- type PingResponse
- type PublicTrustedCARequest
- type PublicTrustedCAResponse
- func (*PublicTrustedCAResponse) Descriptor() ([]byte, []int)
- func (m *PublicTrustedCAResponse) GetHostCAs() []*HostCA
- func (m *PublicTrustedCAResponse) GetMetadata() *ReplyMetadata
- func (m *PublicTrustedCAResponse) GetRevokedHostCAs() []*HostCA
- func (m *PublicTrustedCAResponse) GetRevokedUserCAs() []*UserCA
- func (m *PublicTrustedCAResponse) GetUserCAs() []*UserCA
- func (*PublicTrustedCAResponse) ProtoMessage()
- func (m *PublicTrustedCAResponse) Reset()
- func (m *PublicTrustedCAResponse) String() string
- type ReplyMetadata
- type UserAuthRequest
- func (*UserAuthRequest) Descriptor() ([]byte, []int)
- func (m *UserAuthRequest) GetRequestTime() *google_protobuf.Timestamp
- func (m *UserAuthRequest) GetToken() *OauthToken
- func (m *UserAuthRequest) GetUsername() string
- func (*UserAuthRequest) ProtoMessage()
- func (m *UserAuthRequest) Reset()
- func (m *UserAuthRequest) String() string
- type UserAuthResponse
- func (*UserAuthResponse) Descriptor() ([]byte, []int)
- func (m *UserAuthResponse) GetAuthResponse() []byte
- func (m *UserAuthResponse) GetMetadata() *ReplyMetadata
- func (m *UserAuthResponse) GetUserId() string
- func (m *UserAuthResponse) GetUsername() string
- func (m *UserAuthResponse) GetValid() bool
- func (*UserAuthResponse) ProtoMessage()
- func (m *UserAuthResponse) Reset()
- func (m *UserAuthResponse) String() string
- type UserCA
- func (*UserCA) Descriptor() ([]byte, []int)
- func (m *UserCA) GetId() uint64
- func (m *UserCA) GetPublicKey() []byte
- func (m *UserCA) GetValidFrom() *google_protobuf.Timestamp
- func (m *UserCA) GetValidUntil() *google_protobuf.Timestamp
- func (*UserCA) ProtoMessage()
- func (m *UserCA) Reset()
- func (m *UserCA) String() string
- type UserCertRequest
- func (*UserCertRequest) Descriptor() ([]byte, []int)
- func (m *UserCertRequest) GetAuthorizedPrincipals() []string
- func (m *UserCertRequest) GetCurrentUserCert() []byte
- func (m *UserCertRequest) GetForceCommands() []string
- func (m *UserCertRequest) GetPublicKey() []byte
- func (m *UserCertRequest) GetRemoteUsername() string
- func (m *UserCertRequest) GetRequestTime() *google_protobuf.Timestamp
- func (m *UserCertRequest) GetUserId() string
- func (m *UserCertRequest) GetUsername() string
- func (m *UserCertRequest) GetValidFrom() *google_protobuf.Timestamp
- func (m *UserCertRequest) GetValidUntil() *google_protobuf.Timestamp
- func (*UserCertRequest) ProtoMessage()
- func (m *UserCertRequest) Reset()
- func (m *UserCertRequest) String() string
- type UserCertResponse
- func (*UserCertResponse) Descriptor() ([]byte, []int)
- func (m *UserCertResponse) GetMetadata() *ReplyMetadata
- func (m *UserCertResponse) GetTrustedHostCAs() []*HostCA
- func (m *UserCertResponse) GetUserCert() []byte
- func (m *UserCertResponse) GetUsername() string
- func (*UserCertResponse) ProtoMessage()
- func (m *UserCertResponse) Reset()
- func (m *UserCertResponse) String() string
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RegisterCertServer ¶
func RegisterCertServer(s *grpc.Server, srv CertServer)
Types ¶
type CertClient ¶
type CertClient interface { HostAuth(ctx context.Context, in *HostAuthRequest, opts ...grpc.CallOption) (*HostAuthResponse, error) HostCert(ctx context.Context, in *HostCertRequest, opts ...grpc.CallOption) (*HostCertResponse, error) UserAuth(ctx context.Context, in *UserAuthRequest, opts ...grpc.CallOption) (*UserAuthResponse, error) UserCert(ctx context.Context, in *UserCertRequest, opts ...grpc.CallOption) (*UserCertResponse, error) // This responds back with both host CAs that the users should trust // and the user CA the servers should trust PublicTrustedCA(ctx context.Context, in *PublicTrustedCARequest, opts ...grpc.CallOption) (*PublicTrustedCAResponse, error) // this is just for test/sanity // We may report he metric to get a sense of how the latency between // environments is faring Ping(ctx context.Context, in *PingRequest, opts ...grpc.CallOption) (*PingResponse, error) }
func NewCertClient ¶
func NewCertClient(cc *grpc.ClientConn) CertClient
type CertServer ¶
type CertServer interface { HostAuth(context.Context, *HostAuthRequest) (*HostAuthResponse, error) HostCert(context.Context, *HostCertRequest) (*HostCertResponse, error) UserAuth(context.Context, *UserAuthRequest) (*UserAuthResponse, error) UserCert(context.Context, *UserCertRequest) (*UserCertResponse, error) // This responds back with both host CAs that the users should trust // and the user CA the servers should trust PublicTrustedCA(context.Context, *PublicTrustedCARequest) (*PublicTrustedCAResponse, error) // this is just for test/sanity // We may report he metric to get a sense of how the latency between // environments is faring Ping(context.Context, *PingRequest) (*PingResponse, error) }
type Error ¶
type Error struct { Type string `protobuf:"bytes,1,opt,name=type" json:"type,omitempty"` Msg string `protobuf:"bytes,2,opt,name=msg" json:"msg,omitempty"` }
func (*Error) Descriptor ¶
func (*Error) ProtoMessage ¶
func (*Error) ProtoMessage()
type HostAuth ¶
type HostAuth struct { Id []byte `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"` Errors []*Error `protobuf:"bytes,2,rep,name=errors" json:"errors,omitempty"` }
this is the protobuf message to decrypt the HostAuthResponse.authResponse bytes to
func (*HostAuth) Descriptor ¶
func (*HostAuth) ProtoMessage ¶
func (*HostAuth) ProtoMessage()
type HostAuthRequest ¶
type HostAuthRequest struct { RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` // this will be using AES-GCM cipher // and include the ID to be the first 4 bytes after concatenating with _ the following // the <cloud_name>:<account_id> // region // environment // this is used to identify the preshared key with the cert server // in response, the cert server will return an ID that can be used for subsequent cert request AuthInfo []byte `protobuf:"bytes,2,opt,name=authInfo,proto3" json:"authInfo,omitempty"` }
func (*HostAuthRequest) Descriptor ¶
func (*HostAuthRequest) Descriptor() ([]byte, []int)
func (*HostAuthRequest) GetAuthInfo ¶
func (m *HostAuthRequest) GetAuthInfo() []byte
func (*HostAuthRequest) GetRequestTime ¶
func (m *HostAuthRequest) GetRequestTime() *google_protobuf.Timestamp
func (*HostAuthRequest) ProtoMessage ¶
func (*HostAuthRequest) ProtoMessage()
func (*HostAuthRequest) Reset ¶
func (m *HostAuthRequest) Reset()
func (*HostAuthRequest) String ¶
func (m *HostAuthRequest) String() string
type HostAuthResponse ¶
type HostAuthResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` // this should be the encrypted response based on the key sent // in the authInfo request for the AuthRequest // this is expected to contain the encrypted HostAuth message AuthResponse []byte `protobuf:"bytes,3,opt,name=authResponse,proto3" json:"authResponse,omitempty"` }
func (*HostAuthResponse) Descriptor ¶
func (*HostAuthResponse) Descriptor() ([]byte, []int)
func (*HostAuthResponse) GetAuthResponse ¶
func (m *HostAuthResponse) GetAuthResponse() []byte
func (*HostAuthResponse) GetMetadata ¶
func (m *HostAuthResponse) GetMetadata() *ReplyMetadata
func (*HostAuthResponse) ProtoMessage ¶
func (*HostAuthResponse) ProtoMessage()
func (*HostAuthResponse) Reset ¶
func (m *HostAuthResponse) Reset()
func (*HostAuthResponse) String ¶
func (m *HostAuthResponse) String() string
type HostCA ¶
type HostCA struct { ValidFrom *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=validFrom" json:"validFrom,omitempty"` ValidUntil *google_protobuf.Timestamp `protobuf:"bytes,2,opt,name=validUntil" json:"validUntil,omitempty"` PublicKey []byte `protobuf:"bytes,3,opt,name=publicKey,proto3" json:"publicKey,omitempty"` Id uint64 `protobuf:"varint,4,opt,name=id" json:"id,omitempty"` }
Public Host Certificate Authority's Public Key and additional information at any given time more than one public CA might be trusted, at most 2, so that servers can be rotated to new certificates on time
func (*HostCA) Descriptor ¶
func (*HostCA) GetPublicKey ¶
func (*HostCA) GetValidFrom ¶
func (m *HostCA) GetValidFrom() *google_protobuf.Timestamp
func (*HostCA) GetValidUntil ¶
func (m *HostCA) GetValidUntil() *google_protobuf.Timestamp
func (*HostCA) ProtoMessage ¶
func (*HostCA) ProtoMessage()
type HostCertRequest ¶
type HostCertRequest struct { RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` ValidFrom *google_protobuf.Timestamp `protobuf:"bytes,2,opt,name=validFrom" json:"validFrom,omitempty"` ValidUntil *google_protobuf.Timestamp `protobuf:"bytes,3,opt,name=validUntil" json:"validUntil,omitempty"` Id []byte `protobuf:"bytes,4,opt,name=id,proto3" json:"id,omitempty"` // these need to be FQDN of all the IPs the host needs to have Hostnames []string `protobuf:"bytes,5,rep,name=hostnames" json:"hostnames,omitempty"` PublicKey []byte `protobuf:"bytes,6,opt,name=publicKey,proto3" json:"publicKey,omitempty"` // Send the HostMetadata after the Authentication step HostMetadata []byte `protobuf:"bytes,7,opt,name=hostMetadata,proto3" json:"hostMetadata,omitempty"` }
this is only sent after the host has already authenticated with the server someone reasonably can read the ID from memory if an attacker is already root on the host but at that point all bets are off.. we can keep the id and relevant tokens encrypted on disk if we need to persist it but since the AuthRequest should've taken care of identifying the machine id can be sent over the TLS connection to the server
func (*HostCertRequest) Descriptor ¶
func (*HostCertRequest) Descriptor() ([]byte, []int)
func (*HostCertRequest) GetHostMetadata ¶
func (m *HostCertRequest) GetHostMetadata() []byte
func (*HostCertRequest) GetHostnames ¶
func (m *HostCertRequest) GetHostnames() []string
func (*HostCertRequest) GetId ¶
func (m *HostCertRequest) GetId() []byte
func (*HostCertRequest) GetPublicKey ¶
func (m *HostCertRequest) GetPublicKey() []byte
func (*HostCertRequest) GetRequestTime ¶
func (m *HostCertRequest) GetRequestTime() *google_protobuf.Timestamp
func (*HostCertRequest) GetValidFrom ¶
func (m *HostCertRequest) GetValidFrom() *google_protobuf.Timestamp
func (*HostCertRequest) GetValidUntil ¶
func (m *HostCertRequest) GetValidUntil() *google_protobuf.Timestamp
func (*HostCertRequest) ProtoMessage ¶
func (*HostCertRequest) ProtoMessage()
func (*HostCertRequest) Reset ¶
func (m *HostCertRequest) Reset()
func (*HostCertRequest) String ¶
func (m *HostCertRequest) String() string
type HostCertResponse ¶
type HostCertResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` // this is the cert for the host HostCert []byte `protobuf:"bytes,3,opt,name=hostCert,proto3" json:"hostCert,omitempty"` // this is the cert the host should "trust" for users // logging into the machines TrustedUsersCACert []byte `protobuf:"bytes,4,opt,name=trustedUsersCACert,proto3" json:"trustedUsersCACert,omitempty"` }
func (*HostCertResponse) Descriptor ¶
func (*HostCertResponse) Descriptor() ([]byte, []int)
func (*HostCertResponse) GetHostCert ¶
func (m *HostCertResponse) GetHostCert() []byte
func (*HostCertResponse) GetMetadata ¶
func (m *HostCertResponse) GetMetadata() *ReplyMetadata
func (*HostCertResponse) GetTrustedUsersCACert ¶
func (m *HostCertResponse) GetTrustedUsersCACert() []byte
func (*HostCertResponse) ProtoMessage ¶
func (*HostCertResponse) ProtoMessage()
func (*HostCertResponse) Reset ¶
func (m *HostCertResponse) Reset()
func (*HostCertResponse) String ¶
func (m *HostCertResponse) String() string
type OauthToken ¶
type OauthToken struct { AccessToken string `protobuf:"bytes,1,opt,name=accessToken" json:"accessToken,omitempty"` TokenType string `protobuf:"bytes,2,opt,name=tokenType" json:"tokenType,omitempty"` RefreshToken string `protobuf:"bytes,3,opt,name=refreshToken" json:"refreshToken,omitempty"` Expiry *google_protobuf.Timestamp `protobuf:"bytes,4,opt,name=expiry" json:"expiry,omitempty"` }
func (*OauthToken) Descriptor ¶
func (*OauthToken) Descriptor() ([]byte, []int)
func (*OauthToken) GetAccessToken ¶
func (m *OauthToken) GetAccessToken() string
func (*OauthToken) GetExpiry ¶
func (m *OauthToken) GetExpiry() *google_protobuf.Timestamp
func (*OauthToken) GetRefreshToken ¶
func (m *OauthToken) GetRefreshToken() string
func (*OauthToken) GetTokenType ¶
func (m *OauthToken) GetTokenType() string
func (*OauthToken) ProtoMessage ¶
func (*OauthToken) ProtoMessage()
func (*OauthToken) Reset ¶
func (m *OauthToken) Reset()
func (*OauthToken) String ¶
func (m *OauthToken) String() string
type PingRequest ¶
type PingRequest struct { RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"` }
func (*PingRequest) Descriptor ¶
func (*PingRequest) Descriptor() ([]byte, []int)
func (*PingRequest) GetName ¶
func (m *PingRequest) GetName() string
func (*PingRequest) GetRequestTime ¶
func (m *PingRequest) GetRequestTime() *google_protobuf.Timestamp
func (*PingRequest) ProtoMessage ¶
func (*PingRequest) ProtoMessage()
func (*PingRequest) Reset ¶
func (m *PingRequest) Reset()
func (*PingRequest) String ¶
func (m *PingRequest) String() string
type PingResponse ¶
type PingResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` Message string `protobuf:"bytes,2,opt,name=message" json:"message,omitempty"` }
func (*PingResponse) Descriptor ¶
func (*PingResponse) Descriptor() ([]byte, []int)
func (*PingResponse) GetMessage ¶
func (m *PingResponse) GetMessage() string
func (*PingResponse) GetMetadata ¶
func (m *PingResponse) GetMetadata() *ReplyMetadata
func (*PingResponse) ProtoMessage ¶
func (*PingResponse) ProtoMessage()
func (*PingResponse) Reset ¶
func (m *PingResponse) Reset()
func (*PingResponse) String ¶
func (m *PingResponse) String() string
type PublicTrustedCARequest ¶
type PublicTrustedCARequest struct {
RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"`
}
I may add more parameters for logging in future
func (*PublicTrustedCARequest) Descriptor ¶
func (*PublicTrustedCARequest) Descriptor() ([]byte, []int)
func (*PublicTrustedCARequest) GetRequestTime ¶
func (m *PublicTrustedCARequest) GetRequestTime() *google_protobuf.Timestamp
func (*PublicTrustedCARequest) ProtoMessage ¶
func (*PublicTrustedCARequest) ProtoMessage()
func (*PublicTrustedCARequest) Reset ¶
func (m *PublicTrustedCARequest) Reset()
func (*PublicTrustedCARequest) String ¶
func (m *PublicTrustedCARequest) String() string
type PublicTrustedCAResponse ¶
type PublicTrustedCAResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` HostCAs []*HostCA `protobuf:"bytes,2,rep,name=hostCAs" json:"hostCAs,omitempty"` UserCAs []*UserCA `protobuf:"bytes,3,rep,name=UserCAs" json:"UserCAs,omitempty"` // the clients should update their corresponding // revoked CA file with the contents RevokedHostCAs []*HostCA `protobuf:"bytes,4,rep,name=revokedHostCAs" json:"revokedHostCAs,omitempty"` RevokedUserCAs []*UserCA `protobuf:"bytes,5,rep,name=revokedUserCAs" json:"revokedUserCAs,omitempty"` }
func (*PublicTrustedCAResponse) Descriptor ¶
func (*PublicTrustedCAResponse) Descriptor() ([]byte, []int)
func (*PublicTrustedCAResponse) GetHostCAs ¶
func (m *PublicTrustedCAResponse) GetHostCAs() []*HostCA
func (*PublicTrustedCAResponse) GetMetadata ¶
func (m *PublicTrustedCAResponse) GetMetadata() *ReplyMetadata
func (*PublicTrustedCAResponse) GetRevokedHostCAs ¶
func (m *PublicTrustedCAResponse) GetRevokedHostCAs() []*HostCA
func (*PublicTrustedCAResponse) GetRevokedUserCAs ¶
func (m *PublicTrustedCAResponse) GetRevokedUserCAs() []*UserCA
func (*PublicTrustedCAResponse) GetUserCAs ¶
func (m *PublicTrustedCAResponse) GetUserCAs() []*UserCA
func (*PublicTrustedCAResponse) ProtoMessage ¶
func (*PublicTrustedCAResponse) ProtoMessage()
func (*PublicTrustedCAResponse) Reset ¶
func (m *PublicTrustedCAResponse) Reset()
func (*PublicTrustedCAResponse) String ¶
func (m *PublicTrustedCAResponse) String() string
type ReplyMetadata ¶
type ReplyMetadata struct { // copies the request time from the client RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` // when the server initiated the response ResponseTime *google_protobuf.Timestamp `protobuf:"bytes,2,opt,name=responseTime" json:"responseTime,omitempty"` }
func (*ReplyMetadata) Descriptor ¶
func (*ReplyMetadata) Descriptor() ([]byte, []int)
func (*ReplyMetadata) GetRequestTime ¶
func (m *ReplyMetadata) GetRequestTime() *google_protobuf.Timestamp
func (*ReplyMetadata) GetResponseTime ¶
func (m *ReplyMetadata) GetResponseTime() *google_protobuf.Timestamp
func (*ReplyMetadata) ProtoMessage ¶
func (*ReplyMetadata) ProtoMessage()
func (*ReplyMetadata) Reset ¶
func (m *ReplyMetadata) Reset()
func (*ReplyMetadata) String ¶
func (m *ReplyMetadata) String() string
type UserAuthRequest ¶
type UserAuthRequest struct { RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` Username string `protobuf:"bytes,2,opt,name=username" json:"username,omitempty"` // send the access token Token *OauthToken `protobuf:"bytes,4,opt,name=token" json:"token,omitempty"` }
func (*UserAuthRequest) Descriptor ¶
func (*UserAuthRequest) Descriptor() ([]byte, []int)
func (*UserAuthRequest) GetRequestTime ¶
func (m *UserAuthRequest) GetRequestTime() *google_protobuf.Timestamp
func (*UserAuthRequest) GetToken ¶
func (m *UserAuthRequest) GetToken() *OauthToken
func (*UserAuthRequest) GetUsername ¶
func (m *UserAuthRequest) GetUsername() string
func (*UserAuthRequest) ProtoMessage ¶
func (*UserAuthRequest) ProtoMessage()
func (*UserAuthRequest) Reset ¶
func (m *UserAuthRequest) Reset()
func (*UserAuthRequest) String ¶
func (m *UserAuthRequest) String() string
type UserAuthResponse ¶
type UserAuthResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` Username string `protobuf:"bytes,2,opt,name=username" json:"username,omitempty"` UserId string `protobuf:"bytes,3,opt,name=userId" json:"userId,omitempty"` Valid bool `protobuf:"varint,4,opt,name=valid" json:"valid,omitempty"` // something cryptographic -- haven't implemented yet AuthResponse []byte `protobuf:"bytes,5,opt,name=authResponse,proto3" json:"authResponse,omitempty"` }
func (*UserAuthResponse) Descriptor ¶
func (*UserAuthResponse) Descriptor() ([]byte, []int)
func (*UserAuthResponse) GetAuthResponse ¶
func (m *UserAuthResponse) GetAuthResponse() []byte
func (*UserAuthResponse) GetMetadata ¶
func (m *UserAuthResponse) GetMetadata() *ReplyMetadata
func (*UserAuthResponse) GetUserId ¶
func (m *UserAuthResponse) GetUserId() string
func (*UserAuthResponse) GetUsername ¶
func (m *UserAuthResponse) GetUsername() string
func (*UserAuthResponse) GetValid ¶
func (m *UserAuthResponse) GetValid() bool
func (*UserAuthResponse) ProtoMessage ¶
func (*UserAuthResponse) ProtoMessage()
func (*UserAuthResponse) Reset ¶
func (m *UserAuthResponse) Reset()
func (*UserAuthResponse) String ¶
func (m *UserAuthResponse) String() string
type UserCA ¶
type UserCA struct { ValidFrom *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=validFrom" json:"validFrom,omitempty"` ValidUntil *google_protobuf.Timestamp `protobuf:"bytes,2,opt,name=validUntil" json:"validUntil,omitempty"` PublicKey []byte `protobuf:"bytes,3,opt,name=publicKey,proto3" json:"publicKey,omitempty"` Id uint64 `protobuf:"varint,4,opt,name=id" json:"id,omitempty"` }
func (*UserCA) Descriptor ¶
func (*UserCA) GetPublicKey ¶
func (*UserCA) GetValidFrom ¶
func (m *UserCA) GetValidFrom() *google_protobuf.Timestamp
func (*UserCA) GetValidUntil ¶
func (m *UserCA) GetValidUntil() *google_protobuf.Timestamp
func (*UserCA) ProtoMessage ¶
func (*UserCA) ProtoMessage()
type UserCertRequest ¶
type UserCertRequest struct { RequestTime *google_protobuf.Timestamp `protobuf:"bytes,1,opt,name=requestTime" json:"requestTime,omitempty"` UserId string `protobuf:"bytes,2,opt,name=userId" json:"userId,omitempty"` Username string `protobuf:"bytes,3,opt,name=username" json:"username,omitempty"` // this should go in ID of the cert RemoteUsername string `protobuf:"bytes,4,opt,name=remoteUsername" json:"remoteUsername,omitempty"` // the raw public key to sign with user cert PublicKey []byte `protobuf:"bytes,5,opt,name=publicKey,proto3" json:"publicKey,omitempty"` // this is a hack to just respond back with the // new principals added to the current cert // also it's useful to log before/after for audit // once again, never saved by server, just read // and discarded... // this will be disabled with a future version // once the server has a database CurrentUserCert []byte `protobuf:"bytes,6,opt,name=currentUserCert,proto3" json:"currentUserCert,omitempty"` ValidFrom *google_protobuf.Timestamp `protobuf:"bytes,7,opt,name=validFrom" json:"validFrom,omitempty"` ValidUntil *google_protobuf.Timestamp `protobuf:"bytes,8,opt,name=validUntil" json:"validUntil,omitempty"` AuthorizedPrincipals []string `protobuf:"bytes,9,rep,name=authorizedPrincipals" json:"authorizedPrincipals,omitempty"` // this should be used for scripts to limit access ForceCommands []string `protobuf:"bytes,10,rep,name=forceCommands" json:"forceCommands,omitempty"` }
func (*UserCertRequest) Descriptor ¶
func (*UserCertRequest) Descriptor() ([]byte, []int)
func (*UserCertRequest) GetAuthorizedPrincipals ¶
func (m *UserCertRequest) GetAuthorizedPrincipals() []string
func (*UserCertRequest) GetCurrentUserCert ¶
func (m *UserCertRequest) GetCurrentUserCert() []byte
func (*UserCertRequest) GetForceCommands ¶
func (m *UserCertRequest) GetForceCommands() []string
func (*UserCertRequest) GetPublicKey ¶
func (m *UserCertRequest) GetPublicKey() []byte
func (*UserCertRequest) GetRemoteUsername ¶
func (m *UserCertRequest) GetRemoteUsername() string
func (*UserCertRequest) GetRequestTime ¶
func (m *UserCertRequest) GetRequestTime() *google_protobuf.Timestamp
func (*UserCertRequest) GetUserId ¶
func (m *UserCertRequest) GetUserId() string
func (*UserCertRequest) GetUsername ¶
func (m *UserCertRequest) GetUsername() string
func (*UserCertRequest) GetValidFrom ¶
func (m *UserCertRequest) GetValidFrom() *google_protobuf.Timestamp
func (*UserCertRequest) GetValidUntil ¶
func (m *UserCertRequest) GetValidUntil() *google_protobuf.Timestamp
func (*UserCertRequest) ProtoMessage ¶
func (*UserCertRequest) ProtoMessage()
func (*UserCertRequest) Reset ¶
func (m *UserCertRequest) Reset()
func (*UserCertRequest) String ¶
func (m *UserCertRequest) String() string
type UserCertResponse ¶
type UserCertResponse struct { Metadata *ReplyMetadata `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` Username string `protobuf:"bytes,2,opt,name=username" json:"username,omitempty"` UserCert []byte `protobuf:"bytes,3,opt,name=userCert,proto3" json:"userCert,omitempty"` TrustedHostCAs []*HostCA `protobuf:"bytes,4,rep,name=trustedHostCAs" json:"trustedHostCAs,omitempty"` }
func (*UserCertResponse) Descriptor ¶
func (*UserCertResponse) Descriptor() ([]byte, []int)
func (*UserCertResponse) GetMetadata ¶
func (m *UserCertResponse) GetMetadata() *ReplyMetadata
func (*UserCertResponse) GetTrustedHostCAs ¶
func (m *UserCertResponse) GetTrustedHostCAs() []*HostCA
func (*UserCertResponse) GetUserCert ¶
func (m *UserCertResponse) GetUserCert() []byte
func (*UserCertResponse) GetUsername ¶
func (m *UserCertResponse) GetUsername() string
func (*UserCertResponse) ProtoMessage ¶
func (*UserCertResponse) ProtoMessage()
func (*UserCertResponse) Reset ¶
func (m *UserCertResponse) Reset()
func (*UserCertResponse) String ¶
func (m *UserCertResponse) String() string