cert

Feb 10, 2024

Changes in this version

+ const DefaultScheme

+ const PEMCertBlockType

+ const PEMPrivateKeyBlockType

+ var ErrInvalidPEMBlockType = errors.New("invalid PEM block type")

+ var ErrNoPrivateKey = errors.New("no private key to sign the certificate")

+ func GeneratePublicAndPrivateKeyPair() (publicKeyData KeyData, privateKeyData KeyData, err error)

+ func GetDefaultDomainName() string

+ func GetNodeIDFromCertificate(cert *x509.Certificate) string

+ func IsSupportedPEMBlock(blockType string) bool

+ func LoadCertificate(pemCertificateData []byte) ([]*x509.Certificate, error)

+ func LoadCertificatesFromFile(certificateFilePath string) ([]*x509.Certificate, error)

+ type CACertificate TLSCertificate

+ func ProvideCACertificate(caCertificateConfig CACertificateConfig) (CACertificate, error)

+ type CACertificateConfig struct

+ CertificateFileLocation string

+ PrivateKeyFileLocation string

+ type CreateCertificateOptions struct

+ CertificateSubject pkix.Name

+ DNSName []string

+ IsCA bool

+ ParentTLSCertificate TLSCertificate

+ PrivateKey KeyData

+ PublicKey KeyData

+ ValidDuration time.Duration

+ type KeyData interface

+ GetKeyType func() KeyType

+ GetKeyX509Format func() ([]byte, error)

+ GetRawKeyData func() any

+ GetSHA1Hash func() (string, error)

+ func LoadKeyFromFile(privateKeyFilePath string) (KeyData, error)

+ func ParsePrivateKeyToKeyData(unparsedPrivateKey []byte) (KeyData, error)

+ func ParsePublicKeyToKeyData(unparsedPublicKey any) (KeyData, error)

+ type KeyType string

+ const PKIPrivateKeyType

+ const PKIPublicKeyType

+ type RSAPrivateKeyData struct

+ func (r *RSAPrivateKeyData) GetKeyType() KeyType

+ func (r *RSAPrivateKeyData) GetKeyX509Format() ([]byte, error)

+ func (r *RSAPrivateKeyData) GetRawKeyData() any

+ func (r *RSAPrivateKeyData) GetSHA1Hash() (string, error)

+ type RSAPublicKeyData struct

+ func (r *RSAPublicKeyData) GetKeyType() KeyType

+ func (r *RSAPublicKeyData) GetKeyX509Format() ([]byte, error)

+ func (r *RSAPublicKeyData) GetRawKeyData() any

+ func (r *RSAPublicKeyData) GetSHA1Hash() (string, error)

+ type TLSCertificate interface

+ CreateCertificateAndSign func(certificateSubject pkix.Name, subjectPublicKey KeyData, ...) (TLSCertificate, error)

+ GetCACertificate func() (*x509.Certificate, error)

+ GetCertificate func() *x509.Certificate

+ GetCertificateChains func(pemEncoded bool) [][]byte

+ GetCertificateInPEM func() ([]byte, error)

+ GetCertificateSubjectSerialNumber func() string

+ GetNodeID func() string

+ GetParentTLSCertificate func() TLSCertificate

+ GetPrivateKey func() KeyData

+ GetPublicKey func() KeyData

+ IsCA func() bool

+ SaveCertificateToFile func(certificateFilePath, privateKeyFilePath string) error

+ ValidateSignature func(underValidateCertificate *x509.Certificate) error

+ func CreateCertificate(c CreateCertificateOptions) (TLSCertificate, error)

+ func ProvideTLSCertificate(certificateChain []*x509.Certificate, privateKey KeyData, isCA bool) (TLSCertificate, error)

+ type TransportCertificate TLSCertificate

+ func ProvideTransportCertificate(transportCertificateConfig TransportCertificateConfig, ...) (TransportCertificate, error)

+ func ProvideWorkerNodeTransportCertificate(workerCertificateConfig WorkerNodeTransportCertificateConfig, ...) (TransportCertificate, error)

+ type TransportCertificateConfig struct

+ CertificateFileLocation string

+ CommonName string

+ NodeID string

+ PrivateKeyFileLocation string

+ ValidDuration time.Duration

+ type WorkerNodeCACertificate TLSCertificate

+ func ProvideWorkerNodeCACertificate(config WorkerNodeCACertificateConfig) (WorkerNodeCACertificate, error)

+ type WorkerNodeCACertificateConfig struct

+ CACertificateFilePath string

+ type WorkerNodeTransportCertificateConfig struct

+ CertificateFileLocation string

+ PrivateKeyFileLocation string