grpc

Documentation

Index

• type CertificateAuthorityServer
  • func NewCertificateAuthorityServer(ownerClaim string, hubID string, signerConfig SignerConfig, ...) (*CertificateAuthorityServer, error)
  • func (s *CertificateAuthorityServer) DeleteSigningRecords(ctx context.Context, req *pb.DeleteSigningRecordsRequest) (*pb.DeletedSigningRecords, error)
  • func (s *CertificateAuthorityServer) GetSigningRecords(req *pb.GetSigningRecordsRequest, ...) error
  • func (s *CertificateAuthorityServer) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
  • func (s *CertificateAuthorityServer) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
• type CertificateSigner
• type Config
• type Service
  • func New(config Config, clientApplicationServer *CertificateAuthorityServer, ...) (*Service, error)
• type SignerConfig
  • func (c *SignerConfig) Validate() error

Types

type CertificateAuthorityServer

type CertificateAuthorityServer struct {
	pb.UnimplementedCertificateAuthorityServer
	// contains filtered or unexported fields
}

CertificateAuthorityServer handles incoming requests.

func NewCertificateAuthorityServer

func NewCertificateAuthorityServer(ownerClaim string, hubID string, signerConfig SignerConfig, store *mongodb.Store, logger log.Logger) (*CertificateAuthorityServer, error)

func (*CertificateAuthorityServer) DeleteSigningRecords

func (s *CertificateAuthorityServer) DeleteSigningRecords(ctx context.Context, req *pb.DeleteSigningRecordsRequest) (*pb.DeletedSigningRecords, error)

func (*CertificateAuthorityServer) GetSigningRecords

func (s *CertificateAuthorityServer) GetSigningRecords(req *pb.GetSigningRecordsRequest, srv pb.CertificateAuthority_GetSigningRecordsServer) error

func (*CertificateAuthorityServer) SignCertificate

func (s *CertificateAuthorityServer) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

func (*CertificateAuthorityServer) SignIdentityCertificate

func (s *CertificateAuthorityServer) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

type CertificateSigner

type CertificateSigner interface {
	// csr is encoded by PEM and returns PEM
	Sign(ctx context.Context, csr []byte) ([]byte, error)
}

type Config

type Config = server.Config

type Service

type Service struct {
	*server.Server
}

func New

func New(config Config, clientApplicationServer *CertificateAuthorityServer, validator *validator.Validator, fileWatcher *fsnotify.Watcher, logger log.Logger, tracerProvider trace.TracerProvider) (*Service, error)

type SignerConfig

type SignerConfig struct {
	KeyFile   string        `yaml:"keyFile" json:"keyFile" description:"file name of CA private key in PEM format"`
	CertFile  string        `yaml:"certFile" json:"certFile" description:"file name of CA certificate in PEM format"`
	ValidFrom string        `yaml:"validFrom" json:"validFrom" description:"format https://github.com/karrick/tparse"`
	ExpiresIn time.Duration `yaml:"expiresIn" json:"expiresIn"`
}

func (*SignerConfig) Validate

func (c *SignerConfig) Validate() error