fulcio

Documentation

Index

• func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, ...) (*api.CertificateResponse, error)
• func GetIntermediates() (*x509.CertPool, error)
• func GetRoots() (*x509.CertPool, error)
• func NewClient(fulcioURL string) (api.LegacyClient, error)
• type Signer
  • func NewSigner(ctx context.Context, ko options.KeyOpts) (*Signer, error)
  • func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)

Functions

func GetCert

func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow, oidcIssuer, oidcClientID, oidcClientSecret, oidcRedirectURL string, fClient api.LegacyClient) (*api.CertificateResponse, error)

GetCert returns the PEM-encoded signature of the OIDC identity returned as part of an interactive oauth2 flow plus the PEM-encoded cert chain.

func GetIntermediates

func GetIntermediates() (*x509.CertPool, error)

func GetRoots

func GetRoots() (*x509.CertPool, error)

func NewClient

func NewClient(fulcioURL string) (api.LegacyClient, error)

Types

type Signer

type Signer struct {
	Cert  []byte
	Chain []byte
	SCT   []byte

	*signature.ECDSASignerVerifier
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ctx context.Context, ko options.KeyOpts) (*Signer, error)

func (*Signer) PublicKey

func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)