fulcio

Documentation

Index

• Constants
• func GetRoots() *x509.CertPool
• type Resp
  • func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, ...) (Resp, error)
• type Signer
  • func NewSigner(ctx context.Context, idToken, oidcIssuer, oidcClientID string, ...) (*Signer, error)
  • func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)

Constants

const (
	FlowNormal = "normal"
	FlowDevice = "device"
	FlowToken  = "token"
)

Functions

func GetRoots

func GetRoots() *x509.CertPool

Types

type Resp

type Resp struct {
	CertPEM  []byte
	ChainPEM []byte
	SCT      []byte
}

func GetCert

func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow, oidcIssuer, oidcClientID string, fClient *fulcioClient.Fulcio) (Resp, error)

GetCert returns the PEM-encoded signature of the OIDC identity returned as part of an interactive oauth2 flow plus the PEM-encoded cert chain.

type Signer

type Signer struct {
	Cert  []byte
	Chain []byte
	SCT   []byte

	*signature.ECDSASignerVerifier
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ctx context.Context, idToken, oidcIssuer, oidcClientID string, fClient *fulcioClient.Fulcio) (*Signer, error)

func (*Signer) PublicKey

func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)