certmgr

Documentation

Overview

package certmgr implements the Delta certificate manager. It is configured by the certauth parameters in delta_cfg.json

Index

• func CertToPEM(cert *x509.Certificate) (pemblock []byte)
• func CreateCA(cfg *configmanager.Configuration, slog *servicelogger.Logger, ...) (err error)
• func KeyToPEM(certkey *rsa.PrivateKey) (pemblock []byte)
• func PEMToCert(pemblock []byte) (*x509.Certificate, error)
• func PEMToKey(pemblock []byte) (*rsa.PrivateKey, error)
• type CertManager
  • func New(cfg *configmanager.Configuration, slog *servicelogger.Logger, ...) (cm CertManager, err error)
  • func (cm CertManager) CertificateExists(certtype string, commonname string) (maybe bool, err error)
  • func (cm CertManager) GenerateClientCert(names pkix.Name, dnsnames []string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)
  • func (cm CertManager) GenerateServerCert(names pkix.Name, dnsnames []string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)
  • func (cm CertManager) GetClientCACertPool() *x509.CertPool
  • func (cm *CertManager) HasCA() bool
  • func (cm CertManager) RetrieveClientCert(clientID string, hostname string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)
  • func (cm CertManager) RevokeClientCert(clientID, serialnr int64) (done bool, err error)
  • func (cm *CertManager) SetAudit(au *audit.Audit)
  • func (cm CertManager) VerifyClientCertificate(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error

Functions

func CertToPEM

func CertToPEM(cert *x509.Certificate) (pemblock []byte)

func CreateCA

func CreateCA(cfg *configmanager.Configuration, slog *servicelogger.Logger, db *mysqldb.DeltaMySQLLink) (err error)

func KeyToPEM

func KeyToPEM(certkey *rsa.PrivateKey) (pemblock []byte)

func PEMToCert

func PEMToCert(pemblock []byte) (*x509.Certificate, error)

func PEMToKey

func PEMToKey(pemblock []byte) (*rsa.PrivateKey, error)

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

func New

func New(cfg *configmanager.Configuration, slog *servicelogger.Logger, db *mysqldb.DeltaMySQLLink) (cm CertManager, err error)

func (CertManager) CertificateExists

func (cm CertManager) CertificateExists(certtype string, commonname string) (maybe bool, err error)

func (CertManager) GenerateClientCert

func (cm CertManager) GenerateClientCert(names pkix.Name, dnsnames []string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)

func (CertManager) GenerateServerCert

func (cm CertManager) GenerateServerCert(names pkix.Name, dnsnames []string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)

func (CertManager) GetClientCACertPool

func (cm CertManager) GetClientCACertPool() *x509.CertPool

func (*CertManager) HasCA

func (cm *CertManager) HasCA() bool

func (CertManager) RetrieveClientCert

func (cm CertManager) RetrieveClientCert(clientID string, hostname string) (certificate *x509.Certificate, privkey *rsa.PrivateKey, err error)

func (CertManager) RevokeClientCert

func (cm CertManager) RevokeClientCert(clientID, serialnr int64) (done bool, err error)

func (*CertManager) SetAudit

func (cm *CertManager) SetAudit(au *audit.Audit)

func (CertManager) VerifyClientCertificate

func (cm CertManager) VerifyClientCertificate(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error