fulcio

Documentation

Index

• Constants
• func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, ...) (*api.CertificateResponse, error)
• func GetIntermediates() *x509.CertPool
• func GetRoots() *x509.CertPool
• func NewClient(fulcioURL string) (api.Client, error)
• type Signer
  • func NewSigner(ctx context.Context, ko options.KeyOpts) (*Signer, error)
  • func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)

Constants

const (
	FlowNormal = "normal"
	FlowDevice = "device"
	FlowToken  = "token"
	// spacing is intentional to have this indented
	PrivacyStatement = `` /* 345-byte string literal not displayed */

	PrivacyStatementConfirmation = "" /* 154-byte string literal not displayed */
)

Functions

func GetCert

func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow, oidcIssuer, oidcClientID, oidcClientSecret, oidcRedirectURL string, fClient api.Client) (*api.CertificateResponse, error)

GetCert returns the PEM-encoded signature of the OIDC identity returned as part of an interactive oauth2 flow plus the PEM-encoded cert chain.

func GetIntermediates

func GetIntermediates() *x509.CertPool

func GetRoots

func GetRoots() *x509.CertPool

func NewClient

func NewClient(fulcioURL string) (api.Client, error)

Types

type Signer

type Signer struct {
	Cert  []byte
	Chain []byte
	SCT   []byte

	*signature.ECDSASignerVerifier
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ctx context.Context, ko options.KeyOpts) (*Signer, error)

func (*Signer) PublicKey

func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)