crypto

Documentation

Index

• func CaCertKeyPair() ([]byte, []byte, error)
• func CertificateAuthority() (*x509.Certificate, *rsa.PrivateKey, error)
• func ClientTLSConfig(c *config.MonarchClientConfig) (*tls.Config, error)
• func DecryptAES(key []byte, ciphertext string) (string, error)
• func EncryptAES(key []byte, plaintext string) (string, error)
• func NewClientCertificate(cn string) ([]byte, []byte, error)
• func RandomBytes(n int) []byte
• func ServerCertKeyPair() ([]byte, []byte, error)
• func ServerTLSConfig() (*tls.Config, error)
• type CertVerifier
  • func PeerCertificateVerifier(caCertPEM []byte) CertVerifier

Functions

func CaCertKeyPair

func CaCertKeyPair() ([]byte, []byte, error)

CaCertKeyPair returns pem encoded certificate and key for monarchCA

func CertificateAuthority

func CertificateAuthority() (*x509.Certificate, *rsa.PrivateKey, error)

func ClientTLSConfig

func ClientTLSConfig(c *config.MonarchClientConfig) (*tls.Config, error)

func DecryptAES

func DecryptAES(key []byte, ciphertext string) (string, error)

func EncryptAES

func EncryptAES(key []byte, plaintext string) (string, error)

func NewClientCertificate

func NewClientCertificate(cn string) ([]byte, []byte, error)

NewClientCertificate generates a cert-key pair for a newly created operator

func RandomBytes

func RandomBytes(n int) []byte

func ServerCertKeyPair

func ServerCertKeyPair() ([]byte, []byte, error)

func ServerTLSConfig

func ServerTLSConfig() (*tls.Config, error)

Types

type CertVerifier

type CertVerifier func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error

func PeerCertificateVerifier

func PeerCertificateVerifier(caCertPEM []byte) CertVerifier