ca

Documentation

Index

• func ExtractRawPubkey(pkt *pktoken.PKToken) (interface{}, error)
• type Ca
  • func New(op client.OpenIdProvider) (*Ca, error)
  • func (a *Ca) CheckPKToken(pktJson []byte) (*pktoken.PKToken, error)
  • func (a *Ca) KeyGen(alg string) error
  • func (a *Ca) PktToSignedX509(pktJson []byte) ([]byte, error)
  • func (a *Ca) VerifyPktCert(issuedCertPEM []byte) error

Functions

func ExtractRawPubkey

func ExtractRawPubkey(pkt *pktoken.PKToken) (interface{}, error)

Types

type Ca

type Ca struct {
	Alg jwa.KeyAlgorithm
	// CaCertBytes []byte
	RootCertPem []byte
	// contains filtered or unexported fields
}

func New

func New(op client.OpenIdProvider) (*Ca, error)

func (*Ca) CheckPKToken

func (a *Ca) CheckPKToken(pktJson []byte) (*pktoken.PKToken, error)

func (*Ca) KeyGen

func (a *Ca) KeyGen(alg string) error

func (*Ca) PktToSignedX509

func (a *Ca) PktToSignedX509(pktJson []byte) ([]byte, error)

func (*Ca) VerifyPktCert

func (a *Ca) VerifyPktCert(issuedCertPEM []byte) error

VerifyPktCert checks that the X509 cert is signed by the CA and that the PK Token in the cert matches the public key in the cert.