ca

Documentation

Index

• type Server
  • func New(ca ca.CertificateAuthority, ttl time.Duration, forCA bool, hostlist []string, ...) (*Server, error)
  • func (s *Server) HandleCSR(ctx context.Context, request *pb.CsrRequest) (*pb.CsrResponse, error)
  • func (s *Server) Run() error

Types

type Server

type Server struct {
	// contains filtered or unexported fields
}

Server implements pb.IstioCAService and provides the service on the specified port.

func New

func New(ca ca.CertificateAuthority, ttl time.Duration, forCA bool, hostlist []string, port int) (*Server, error)

New creates a new instance of `IstioCAServiceServer`.

func (*Server) HandleCSR

func (s *Server) HandleCSR(ctx context.Context, request *pb.CsrRequest) (*pb.CsrResponse, error)

HandleCSR handles an incoming certificate signing request (CSR). It does proper validation (e.g. authentication) and upon validated, signs the CSR and returns the resulting certificate. If not approved, reason for refusal to sign is returned as part of the response object.

func (*Server) Run

func (s *Server) Run() error

Run starts a GRPC server on the specified port.