identity

Documentation

Index

• func LoadKey(keyAddr string) (crypto.PrivateKey, error)
• type ID
  • func (id *ID) CA() *x509.CertPool
  • func (id *ID) Cert() *tls.Certificate
  • func (i *ID) ClientTLSConfig() *tls.Config
  • func (i *ID) GetClientCertificate(info *tls.CertificateRequestInfo) (*tls.Certificate, error)
  • func (i *ID) GetServerCertificate(info *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (id *ID) Reload() error
  • func (id *ID) ServerCert() *tls.Certificate
  • func (i *ID) ServerTLSConfig() *tls.Config
• type Identity
  • func LoadIdentity(cfg IdentityConfig) (Identity, error)
• type IdentityConfig
• type TokenId
  • func LoadClientIdentity(certPath, keyPath, caCertPath string) (*TokenId, error)
  • func LoadServerIdentity(clientCertPath, serverCertPath, keyPath, caCertPath string) (*TokenId, error)
  • func NewIdentity(id Identity) *TokenId
  • func (i *TokenId) ClientTLSConfig() *tls.Config
  • func (i *TokenId) ServerTLSConfig() *tls.Config
  • func (i *TokenId) ShallowCloneWithNewToken(token string) *TokenId

Functions

func LoadKey

func LoadKey(keyAddr string) (crypto.PrivateKey, error)

Types

type ID

type ID struct {
	IdentityConfig
	// contains filtered or unexported fields
}

func (*ID) CA

func (id *ID) CA() *x509.CertPool

func (*ID) Cert

func (id *ID) Cert() *tls.Certificate

func (*ID) ClientTLSConfig

func (i *ID) ClientTLSConfig() *tls.Config

func (*ID) GetClientCertificate

func (i *ID) GetClientCertificate(info *tls.CertificateRequestInfo) (*tls.Certificate, error)

func (*ID) GetServerCertificate

func (i *ID) GetServerCertificate(info *tls.ClientHelloInfo) (*tls.Certificate, error)

func (*ID) Reload

func (id *ID) Reload() error

func (*ID) ServerCert

func (id *ID) ServerCert() *tls.Certificate

func (*ID) ServerTLSConfig

func (i *ID) ServerTLSConfig() *tls.Config

type Identity

type Identity interface {
	Cert() *tls.Certificate
	ServerCert() *tls.Certificate
	CA() *x509.CertPool
	ServerTLSConfig() *tls.Config
	ClientTLSConfig() *tls.Config
	Reload() error
}

func LoadIdentity

func LoadIdentity(cfg IdentityConfig) (Identity, error)

type IdentityConfig

type IdentityConfig struct {
	Key        string `json:"key" yaml:"key" mapstructure:"key"`
	Cert       string `json:"cert" yaml:"cert" mapstructure:"cert"`
	ServerCert string `json:"server_cert,omitempty" yaml:"server_cert,omitempty" mapstructure:"server_cert,omitempty"`
	ServerKey  string `json:"server_key,omitempty" yaml:"server_key,omitempty" mapstructure:"server_key,omitempty"`
	CA         string `json:"ca,omitempty" yaml:"ca,omitempty" mapstructure:"ca"`
}

type TokenId

type TokenId struct {
	Id    Identity
	Token string
	Data  map[uint32][]byte
}

func LoadClientIdentity

func LoadClientIdentity(certPath, keyPath, caCertPath string) (*TokenId, error)

func LoadServerIdentity

func LoadServerIdentity(clientCertPath, serverCertPath, keyPath, caCertPath string) (*TokenId, error)

func NewIdentity

func NewIdentity(id Identity) *TokenId

func (*TokenId) ClientTLSConfig

func (i *TokenId) ClientTLSConfig() *tls.Config

func (*TokenId) ServerTLSConfig

func (i *TokenId) ServerTLSConfig() *tls.Config

func (*TokenId) ShallowCloneWithNewToken

func (i *TokenId) ShallowCloneWithNewToken(token string) *TokenId