api

Documentation

Index

• func CreateKey(cryptoServices signer.CryptoServiceIndex) http.Handler
• func DeleteKey(cryptoServices signer.CryptoServiceIndex) http.Handler
• func FindKeyByID(cryptoServices signer.CryptoServiceIndex, keyID *pb.KeyID) (data.PublicKey, signed.CryptoService, error)
• func Handlers(cryptoServices signer.CryptoServiceIndex) *mux.Router
• func KeyInfo(cryptoServices signer.CryptoServiceIndex) http.Handler
• func Sign(cryptoServices signer.CryptoServiceIndex) http.Handler
• type KeyManagementServer
  • func (s *KeyManagementServer) CheckHealth(ctx context.Context, v *pb.Void) (*pb.HealthStatus, error)
  • func (s *KeyManagementServer) CreateKey(ctx context.Context, algorithm *pb.Algorithm) (*pb.PublicKey, error)
  • func (s *KeyManagementServer) DeleteKey(ctx context.Context, keyID *pb.KeyID) (*pb.Void, error)
  • func (s *KeyManagementServer) GetKeyInfo(ctx context.Context, keyID *pb.KeyID) (*pb.PublicKey, error)
• type RSAHardwareCryptoService
  • func NewRSAHardwareCryptoService(ctx *pkcs11.Ctx, session pkcs11.SessionHandle) *RSAHardwareCryptoService
  • func (s *RSAHardwareCryptoService) Create(role, algo string) (data.PublicKey, error)
  • func (s *RSAHardwareCryptoService) GetKey(keyID string) data.PublicKey
  • func (s *RSAHardwareCryptoService) GetPrivateKey(keyID string) (data.PrivateKey, string, error)
  • func (s *RSAHardwareCryptoService) ListKeys(role string) []string
  • func (s *RSAHardwareCryptoService) RemoveKey(keyID string) error
  • func (s *RSAHardwareCryptoService) Sign(keyIDs []string, payload []byte) ([]data.Signature, error)
• type SignerServer
  • func (s *SignerServer) CheckHealth(ctx context.Context, v *pb.Void) (*pb.HealthStatus, error)
  • func (s *SignerServer) Sign(ctx context.Context, sr *pb.SignatureRequest) (*pb.Signature, error)

Functions

func CreateKey

func CreateKey(cryptoServices signer.CryptoServiceIndex) http.Handler

CreateKey returns a handler that generates a new

func DeleteKey

func DeleteKey(cryptoServices signer.CryptoServiceIndex) http.Handler

DeleteKey returns a handler that delete a specific KeyID

func FindKeyByID

func FindKeyByID(cryptoServices signer.CryptoServiceIndex, keyID *pb.KeyID) (data.PublicKey, signed.CryptoService, error)

FindKeyByID looks for the key with the given ID in each of the signing services in sigServices. It returns the first matching key it finds, or ErrInvalidKeyID if the key is not found in any of the signing services. It also returns the CryptoService associated with the key, so the caller can perform operations with the key (such as signing).

func Handlers

func Handlers(cryptoServices signer.CryptoServiceIndex) *mux.Router

Handlers sets up all the handers for the routes, injecting a specific CryptoService object for them to use

func KeyInfo

func KeyInfo(cryptoServices signer.CryptoServiceIndex) http.Handler

KeyInfo returns a Handler that given a specific Key ID param, returns the public key bits of that key

func Sign

func Sign(cryptoServices signer.CryptoServiceIndex) http.Handler

Sign returns a handler that is able to perform signatures on a given blob

Types

type KeyManagementServer

type KeyManagementServer struct {
	CryptoServices signer.CryptoServiceIndex
	HealthChecker  func() map[string]string
}

KeyManagementServer implements the KeyManagementServer grpc interface

func (*KeyManagementServer) CheckHealth

func (s *KeyManagementServer) CheckHealth(ctx context.Context, v *pb.Void) (*pb.HealthStatus, error)

CheckHealth returns the HealthStatus with the service

func (*KeyManagementServer) CreateKey

func (s *KeyManagementServer) CreateKey(ctx context.Context, algorithm *pb.Algorithm) (*pb.PublicKey, error)

CreateKey returns a PublicKey created using KeyManagementServer's SigningService

func (*KeyManagementServer) DeleteKey

func (s *KeyManagementServer) DeleteKey(ctx context.Context, keyID *pb.KeyID) (*pb.Void, error)

DeleteKey deletes they key associated with a KeyID

func (*KeyManagementServer) GetKeyInfo

func (s *KeyManagementServer) GetKeyInfo(ctx context.Context, keyID *pb.KeyID) (*pb.PublicKey, error)

GetKeyInfo returns they PublicKey associated with a KeyID

type RSAHardwareCryptoService

type RSAHardwareCryptoService struct {
	// contains filtered or unexported fields
}

RSAHardwareCryptoService is an implementation of SigningService

func NewRSAHardwareCryptoService

func NewRSAHardwareCryptoService(ctx *pkcs11.Ctx, session pkcs11.SessionHandle) *RSAHardwareCryptoService

NewRSAHardwareCryptoService returns an instance of RSAHardwareCryptoService

func (*RSAHardwareCryptoService) Create

func (s *RSAHardwareCryptoService) Create(role, algo string) (data.PublicKey, error)

Create creates a key and returns its public components

func (*RSAHardwareCryptoService) GetKey

func (s *RSAHardwareCryptoService) GetKey(keyID string) data.PublicKey

GetKey returns the public components of a particular key

func (*RSAHardwareCryptoService) GetPrivateKey

func (s *RSAHardwareCryptoService) GetPrivateKey(keyID string) (data.PrivateKey, string, error)

GetPrivateKey is not implemented

func (*RSAHardwareCryptoService) ListKeys

func (s *RSAHardwareCryptoService) ListKeys(role string) []string

ListKeys not implemented yet

func (*RSAHardwareCryptoService) RemoveKey

func (s *RSAHardwareCryptoService) RemoveKey(keyID string) error

RemoveKey removes a key from the key database

func (*RSAHardwareCryptoService) Sign

func (s *RSAHardwareCryptoService) Sign(keyIDs []string, payload []byte) ([]data.Signature, error)

Sign returns a signature for a given signature request

type SignerServer

type SignerServer struct {
	CryptoServices signer.CryptoServiceIndex
	HealthChecker  func() map[string]string
}

SignerServer implements the SignerServer grpc interface

func (*SignerServer) CheckHealth

func (s *SignerServer) CheckHealth(ctx context.Context, v *pb.Void) (*pb.HealthStatus, error)

CheckHealth returns the HealthStatus with the service

func (*SignerServer) Sign

func (s *SignerServer) Sign(ctx context.Context, sr *pb.SignatureRequest) (*pb.Signature, error)

Sign signs a message and returns the signature using a private key associate with the KeyID from the SignatureRequest