pkcs11client

package

Go to main page

Versions in this module

v0

v0.3.5

Mar 27, 2021

v0.3.4

Mar 22, 2021

v0.3.3

Mar 17, 2021

Changes in this version

+ func GetPubKeyType(publicKey crypto.PublicKey) (keyType x509.PublicKeyAlgorithm, err error)

type Pkcs11Client

+ func (p *Pkcs11Client) GetRSAPublicKey(object pkcs11.ObjectHandle) (*rsa.PublicKey, error)

v0.3.2

Mar 14, 2021

Changes in this version

+ func GenSubjectKeyID(publicKey crypto.PublicKey) ([]byte, error)

+ func LoadFromFileAsString(filename string) (*string, error)

+ func LoadPEMCertFromFile(filename string) (*x509.Certificate, error)

type Pkcs11Client

+ func (p *Pkcs11Client) CheckExistsOkCreateKeyPair(keyConfig *KeyConfig) error

+ func (p *Pkcs11Client) GetGenSubjectKeyId(keyConfig *KeyConfig, keyType uint) (subjectKeyId []byte, publicKey crypto.PublicKey, err error)

v0.3.1

Mar 5, 2021

Changes in this version

+ const ERR_NEWKEYALREADYEXISTS

+ const ERR_NEWKEYINTEGRITY

+ const ERR_NOMECHANISMCREATE

+ const ERR_UNSUPPORTEDCURVESIZE

+ const ERR_UNSUPPORTEDKEYTYPE

type KeyConfig

+ KeyBits int

+ type KeyConfigKeyPairTemplate struct

+ func GenKeyConfigKeyPairTemplate(keyConfig *KeyConfig) KeyConfigKeyPairTemplate

+ func (kp *KeyConfigKeyPairTemplate) GenDefaultKeyPairPrivTemplateForSigning()

+ func (kp *KeyConfigKeyPairTemplate) GenDefaultKeyPairPubTemplateForSigning()

+ func (kp *KeyConfigKeyPairTemplate) GenDefaultKeyPairTemplateForSigning()

+ func (kp *KeyConfigKeyPairTemplate) GenDefaultKeySecurityTemplate()

+ func (kp *KeyConfigKeyPairTemplate) GenKeyPairTemplateAttribs() (privAttribs []*pkcs11.Attribute, pubAttribs []*pkcs11.Attribute, err error)

+ type KeyTemplatePrivConfig struct

+ IsDecrypt bool

+ IsDerive bool

+ IsSign bool

+ IsUnwrap bool

+ type KeyTemplatePubConfig struct

+ Exponent []byte

+ IsEncrypt bool

+ IsVerify bool

+ IsWrap bool

+ type KeyTemplateSecurity struct

+ IsAlwaysSensitive bool

+ IsExtractable bool

+ IsModifiable bool

+ IsNeverExtractable bool

+ IsPrivate bool

+ IsSensitive bool

+ IsToken bool

type Pkcs11Client

+ func (p *Pkcs11Client) CheckExistsCreateKeyPair(keyConfig *KeyConfig) error

+ func (p *Pkcs11Client) CreateKeyPair(keyConfig *KeyConfig) error

+ func (p *Pkcs11Client) DeleteKeyPair(keyConfig *KeyConfig) (err error)

+ func (p *Pkcs11Client) ExistsPublicKey(keyConfig *KeyConfig) (exists bool, err error)

+ func (p *Pkcs11Client) FetchKeyPairHandles(keyConfig *KeyConfig) (privKeyHandle *[]pkcs11.ObjectHandle, pubKeyHandle *[]pkcs11.ObjectHandle, ...)

v0.3.1-beta.1

Mar 5, 2021

v0.3.0

Feb 28, 2021

Changes in this version

+ const CKK_EC_EDWARDS

+ const CKM_EDDSA

+ const CKM_EDDSA_NACL

+ const DEFAULT_CONNECTTIMEOUTS

+ const DEFAULT_READTIMEOUTS

+ const PKCS11CONNECTION_FAILED

+ const PKCS11CONNECTION_INPROGRESS

+ const PKCS11CONNECTION_NONE

+ const PKCS11CONNECTION_SUCCEEDED

+ const PKCS11ERR_CONNECTIONTIMEOUT

+ const PKCS11ERR_GENERICERROR

+ const PKCS11ERR_NONE

+ const PKCS11ERR_READTIMEOUT

+ func GenMechanismById(mechanismId uint) (mechanism []*pkcs11.Mechanism, err error)

+ func GenSignedCert(csr *x509.CertificateRequest, caCert *x509.Certificate, caSigner *HsmSigner) (signedCert *x509.Certificate, err error)

+ func GenSignerMechanismById(mechanismId uint, opts crypto.SignerOpts) ([]*pkcs11.Mechanism, error)

+ func LoadCertFromFile(filename string) (*x509.Certificate, error)

+ func LoadCertRequestFromFile(filename string) (*x509.CertificateRequest, error)

+ func LoadPubkeyFromFile(filename string) (interface{}, error)

+ func SaveCertToFile(filename string, cert *x509.Certificate) error

+ func SaveDataToFile(filename string, fileData *[]byte) (err error)

+ type CASigningRequest struct

+ type HsmConfig struct

+ ConnectTimeoutS uint

+ KeyLabel string

+ Lib string

+ Pin string

+ ReadTimeoutS uint

+ SlotId uint

+ func ParseHsmConfig(filename string) (*HsmConfig, error)

+ func (h *HsmConfig) CheckSetDefaultTimeouts()

+ func (h *HsmConfig) ValidateConfig() error

+ type HsmSigner struct

+ CryptoSigner crypto.Signer

+ KeyConfig KeyConfig

+ Pkcs11Client *Pkcs11Client

+ PublicKey crypto.PublicKey

+ Serial int64

+ SignatureAlgo x509.SignatureAlgorithm

+ SignerOpts crypto.SignerOpts

+ func (t HsmSigner) Public() crypto.PublicKey

+ func (t HsmSigner) Sign(_ io.Reader, digest []byte, opts crypto.SignerOpts) (signedCsr []byte, err error)

+ type KeyConfig struct

+ Id string

+ Label string

+ Mechanism []*pkcs11.Mechanism

+ Type uint

+ type Pkcs11Client struct

+ ConnectionState Pkcs11ConnectionState

+ HsmConfig *HsmConfig

+ LastErr error

+ LastErrCode Pkcs11ErrorCode

+ Pkcs11Mutex sync.Mutex

+ func (p *Pkcs11Client) Cleanup()

+ func (p *Pkcs11Client) DecryptRsaPkcs1v15(encryptedData *[]byte, plainData *[]byte, keyConfig KeyConfig) (err error)

+ func (p *Pkcs11Client) DecryptRsaPkcsOaep(encryptedData *[]byte, plainData *[]byte, keyConfig KeyConfig, ...) (err error)

+ func (p *Pkcs11Client) DecryptRsaPkcsX509(encryptedData *[]byte, plainData *[]byte, keyConfig KeyConfig) (err error)

+ func (p *Pkcs11Client) DecryptWithHandle(encryptedData *[]byte, plainText *[]byte, mechanism []*pkcs11.Mechanism, ...) (err error)

+ func (p *Pkcs11Client) EncryptRsaPkcs1v15(plainData *[]byte, encryptedData *[]byte, keyConfig KeyConfig) (err error)

+ func (p *Pkcs11Client) EncryptRsaPkcsOaep(plainData *[]byte, encryptedData *[]byte, keyConfig KeyConfig, ...) (err error)

+ func (p *Pkcs11Client) EncryptRsaPkcsX509(plainData *[]byte, encryptedData *[]byte, keyConfig KeyConfig) (err error)

+ func (p *Pkcs11Client) EncryptWithHandle(plainData *[]byte, encryptedData *[]byte, mechanism []*pkcs11.Mechanism, ...) (err error)

+ func (p *Pkcs11Client) FindObjects(attribs []*pkcs11.Attribute, max int) (objHandles []pkcs11.ObjectHandle, err error)

+ func (p *Pkcs11Client) FlushSession()

+ func (p *Pkcs11Client) GetECDSAPublicKey(object pkcs11.ObjectHandle) (*ecdsa.PublicKey, error)

+ func (p *Pkcs11Client) Init() (err error)

+ func (p *Pkcs11Client) InitAndLoginWithTimeout() (err error)

+ func (p *Pkcs11Client) Login() (err error)

+ func (p *Pkcs11Client) LoginWithTimeout() error

+ func (p *Pkcs11Client) Logout() (err error)

+ func (p *Pkcs11Client) ReadECPublicKey(keyConfig *KeyConfig) (pubKey interface{}, err error)

+ func (p *Pkcs11Client) ReadExistsPublicKey(keyConfig *KeyConfig) (publicKey []byte, err error)

+ func (p *Pkcs11Client) ReadPublicKey(keyConfig *KeyConfig, pubKeyType uint) (pubKey interface{}, err error)

+ func (p *Pkcs11Client) ReadRSAPublicKey(keyConfig *KeyConfig) (pubKey interface{}, err error)

+ func (p *Pkcs11Client) SignCertDSA(csrData []byte, signer *HsmSigner) (cert []byte, err error)

+ func (p *Pkcs11Client) SignCertECDSA(csrData []byte, signer *HsmSigner) (cert []byte, err error)

+ func (p *Pkcs11Client) SignCertEDDSA(csrData []byte, signer *HsmSigner) (cert []byte, err error)

+ func (p *Pkcs11Client) SignCertRSA(csrData []byte, signer *HsmSigner) (cert []byte, err error)

+ func (p *Pkcs11Client) SignCertRSAPSS(csrData []byte, signer *HsmSigner) (cert []byte, err error)

+ type Pkcs11ConnectionState int

+ type Pkcs11ErrorCode int

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL