grpc

Documentation

Index

• type CertificateAuthorityServer
  • func NewCertificateAuthorityServer(ownerClaim string, hubID string, signerConfig SignerConfig, store store.Store, ...) (*CertificateAuthorityServer, error)
  • func (s *CertificateAuthorityServer) Close()
  • func (s *CertificateAuthorityServer) DeleteSigningRecords(ctx context.Context, req *pb.DeleteSigningRecordsRequest) (*pb.DeletedSigningRecords, error)
  • func (s *CertificateAuthorityServer) GetSigner() *Signer
  • func (s *CertificateAuthorityServer) GetSigningRecords(req *pb.GetSigningRecordsRequest, ...) error
  • func (s *CertificateAuthorityServer) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
  • func (s *CertificateAuthorityServer) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
• type Config
• type Service
  • func New(config Config, clientApplicationServer *CertificateAuthorityServer, ...) (*Service, error)
• type Signer
  • func NewSigner(ownerClaim string, hubID string, signerConfig SignerConfig) (*Signer, error)
  • func (s *Signer) Sign(ctx context.Context, csr []byte) ([]byte, *pb.SigningRecord, error)
  • func (s *Signer) SignIdentityCSR(ctx context.Context, csr []byte) ([]byte, *pb.SigningRecord, error)
• type SignerConfig
  • func (c *SignerConfig) String() string
  • func (c *SignerConfig) Validate() error

Types

type CertificateAuthorityServer

type CertificateAuthorityServer struct {
	pb.UnimplementedCertificateAuthorityServer
	// contains filtered or unexported fields
}

CertificateAuthorityServer handles incoming requests.

func NewCertificateAuthorityServer

func NewCertificateAuthorityServer(ownerClaim string, hubID string, signerConfig SignerConfig, store store.Store, fileWatcher *fsnotify.Watcher, logger log.Logger) (*CertificateAuthorityServer, error)

func (*CertificateAuthorityServer) Close

func (s *CertificateAuthorityServer) Close()

func (*CertificateAuthorityServer) DeleteSigningRecords

func (s *CertificateAuthorityServer) DeleteSigningRecords(ctx context.Context, req *pb.DeleteSigningRecordsRequest) (*pb.DeletedSigningRecords, error)

func (*CertificateAuthorityServer) GetSigner

func (s *CertificateAuthorityServer) GetSigner() *Signer

func (*CertificateAuthorityServer) GetSigningRecords

func (s *CertificateAuthorityServer) GetSigningRecords(req *pb.GetSigningRecordsRequest, srv pb.CertificateAuthority_GetSigningRecordsServer) error

func (*CertificateAuthorityServer) SignCertificate

func (s *CertificateAuthorityServer) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

func (*CertificateAuthorityServer) SignIdentityCertificate

func (s *CertificateAuthorityServer) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

type Config

type Config = server.Config

type Service

type Service struct {
	*server.Server
}

func New

func New(config Config, clientApplicationServer *CertificateAuthorityServer, validator *validator.Validator, fileWatcher *fsnotify.Watcher, logger log.Logger, tracerProvider trace.TracerProvider) (*Service, error)

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ownerClaim string, hubID string, signerConfig SignerConfig) (*Signer, error)

func (*Signer) Sign

func (s *Signer) Sign(ctx context.Context, csr []byte) ([]byte, *pb.SigningRecord, error)

func (*Signer) SignIdentityCSR

func (s *Signer) SignIdentityCSR(ctx context.Context, csr []byte) ([]byte, *pb.SigningRecord, error)

type SignerConfig

type SignerConfig struct {
	CAPool    interface{}         `yaml:"caPool" json:"caPool" description:"file path to the root certificates in PEM format"`
	KeyFile   urischeme.URIScheme `yaml:"keyFile" json:"keyFile" description:"file name of CA private key in PEM format"`
	CertFile  urischeme.URIScheme `yaml:"certFile" json:"certFile" description:"file name of CA certificate in PEM format"`
	ValidFrom string              `yaml:"validFrom" json:"validFrom" description:"format https://github.com/karrick/tparse"`
	ExpiresIn time.Duration       `yaml:"expiresIn" json:"expiresIn"`
	// contains filtered or unexported fields
}

func (*SignerConfig) String

func (c *SignerConfig) String() string

func (*SignerConfig) Validate

func (c *SignerConfig) Validate() error