tsa

Documentation

Index

• func GetTimestampedSignature(sigBytes []byte, tsaClient client.TimestampAuthorityClient) ([]byte, error)
• func NewSigner(inner cosign.Signer, tsaClient client.TimestampAuthorityClient) cosign.Signer
• func SplitPEMCertificateChain(pem []byte) (leaves, intermediates, roots []*x509.Certificate, err error)

Functions

func GetTimestampedSignature

func GetTimestampedSignature(sigBytes []byte, tsaClient client.TimestampAuthorityClient) ([]byte, error)

GetTimestampedSignature queries a timestamp authority to fetch an RFC3161 timestamp. sigBytes is an opaque blob, but is typically a signature over an artifact.

func NewSigner

func NewSigner(inner cosign.Signer, tsaClient client.TimestampAuthorityClient) cosign.Signer

NewSigner returns a `cosign.Signer` which uploads the signature to a TSA

func SplitPEMCertificateChain

func SplitPEMCertificateChain(pem []byte) (leaves, intermediates, roots []*x509.Certificate, err error)

SplitPEMCertificateChain returns a list of leaf (non-CA) certificates, a certificate pool for intermediate CA certificates, and a certificate pool for root CA certificates