signer

Documentation

Index

• type KeySigner
  • func New(conf *config.SSH) (*KeySigner, error)
  • func (s *KeySigner) GenerateRevocationList(certs []*store.CertRecord) ([]byte, error)
  • func (s *KeySigner) SignUserKey(req *lib.SignRequest, username string) (*ssh.Certificate, error)

Types

type KeySigner

type KeySigner struct {
	// contains filtered or unexported fields
}

KeySigner does the work of signing a ssh public key with the CA key.

func New

func New(conf *config.SSH) (*KeySigner, error)

New creates a new KeySigner from the supplied configuration.

func (*KeySigner) GenerateRevocationList

func (s *KeySigner) GenerateRevocationList(certs []*store.CertRecord) ([]byte, error)

GenerateRevocationList returns an SSH key revocation list (KRL).

func (*KeySigner) SignUserKey

func (s *KeySigner) SignUserKey(req *lib.SignRequest, username string) (*ssh.Certificate, error)

SignUserKey returns a signed ssh certificate.