Documentation ¶
Overview ¶
Package legacy is a reverse proxy.
It translates gRPC into RESTful JSON APIs.
Index ¶
- Constants
- Variables
- func RegisterCAHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error
- func RegisterCAHandlerClient(ctx context.Context, mux *runtime.ServeMux, client CAClient) error
- func RegisterCAHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, ...) (err error)
- func RegisterCAHandlerServer(ctx context.Context, mux *runtime.ServeMux, server CAServer) error
- func RegisterCAServer(s grpc.ServiceRegistrar, srv CAServer)
- type CAClient
- type CAServer
- type CreateSigningCertificateRequest
- func (*CreateSigningCertificateRequest) Descriptor() ([]byte, []int)deprecated
- func (x *CreateSigningCertificateRequest) GetCertificateSigningRequest() []bytedeprecated
- func (x *CreateSigningCertificateRequest) GetPublicKey() *PublicKeydeprecated
- func (x *CreateSigningCertificateRequest) GetSignedEmailAddress() []bytedeprecated
- func (*CreateSigningCertificateRequest) ProtoMessage()
- func (x *CreateSigningCertificateRequest) ProtoReflect() protoreflect.Message
- func (x *CreateSigningCertificateRequest) Reset()
- func (x *CreateSigningCertificateRequest) String() string
- type PublicKey
- func (*PublicKey) Descriptor() ([]byte, []int)deprecated
- func (x *PublicKey) GetAlgorithm() stringdeprecated
- func (x *PublicKey) GetContent() []bytedeprecated
- func (*PublicKey) ProtoMessage()
- func (x *PublicKey) ProtoReflect() protoreflect.Message
- func (x *PublicKey) Reset()
- func (x *PublicKey) String() string
- type UnimplementedCAServer
- type UnsafeCAServer
Constants ¶
const ( CA_CreateSigningCertificate_FullMethodName = "/dev.sigstore.fulcio.v1beta.CA/CreateSigningCertificate" CA_GetRootCertificate_FullMethodName = "/dev.sigstore.fulcio.v1beta.CA/GetRootCertificate" )
Variables ¶
var CA_ServiceDesc = grpc.ServiceDesc{ ServiceName: "dev.sigstore.fulcio.v1beta.CA", HandlerType: (*CAServer)(nil), Methods: []grpc.MethodDesc{ { MethodName: "CreateSigningCertificate", Handler: _CA_CreateSigningCertificate_Handler, }, { MethodName: "GetRootCertificate", Handler: _CA_GetRootCertificate_Handler, }, }, Streams: []grpc.StreamDesc{}, Metadata: "fulcio_legacy.proto", }
CA_ServiceDesc is the grpc.ServiceDesc for CA service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)
var File_fulcio_legacy_proto protoreflect.FileDescriptor
Functions ¶
func RegisterCAHandler ¶
RegisterCAHandler registers the http handlers for service CA to "mux". The handlers forward requests to the grpc endpoint over "conn".
func RegisterCAHandlerClient ¶
RegisterCAHandlerClient registers the http handlers for service CA to "mux". The handlers forward requests to the grpc endpoint over the given implementation of "CAClient". Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "CAClient" doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in "CAClient" to call the correct interceptors. This client ignores the HTTP middlewares.
func RegisterCAHandlerFromEndpoint ¶
func RegisterCAHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error)
RegisterCAHandlerFromEndpoint is same as RegisterCAHandler but automatically dials to "endpoint" and closes the connection when "ctx" gets done.
func RegisterCAHandlerServer ¶
RegisterCAHandlerServer registers the http handlers for service CA to "mux". UnaryRPC :call CAServer directly. StreamingRPC :currently unsupported pending https://github.com/grpc/grpc-go/issues/906. Note that using this registration option will cause many gRPC library features to stop working. Consider using RegisterCAHandlerFromEndpoint instead. GRPC interceptors will not work for this type of registration. To use interceptors, you must use the "runtime.WithMiddlewares" option in the "runtime.NewServeMux" call.
func RegisterCAServer ¶
func RegisterCAServer(s grpc.ServiceRegistrar, srv CAServer)
Types ¶
type CAClient ¶
type CAClient interface { // Deprecated: Do not use. // // Returns an X509 certificate created by the Fulcio certificate authority for the given request parameters CreateSigningCertificate(ctx context.Context, in *CreateSigningCertificateRequest, opts ...grpc.CallOption) (*httpbody.HttpBody, error) // Deprecated: Do not use. // // Returns the public key that can be used to validate the signed tree head GetRootCertificate(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*httpbody.HttpBody, error) }
CAClient is the client API for CA service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
This implements the pre-GA HTTP-based Fulcio API. This interface is deprecated and will only receive backports of security-related features - clients should prefer the GA GRPC interface!
func NewCAClient ¶
func NewCAClient(cc grpc.ClientConnInterface) CAClient
type CAServer ¶
type CAServer interface { // Deprecated: Do not use. // // Returns an X509 certificate created by the Fulcio certificate authority for the given request parameters CreateSigningCertificate(context.Context, *CreateSigningCertificateRequest) (*httpbody.HttpBody, error) // Deprecated: Do not use. // // Returns the public key that can be used to validate the signed tree head GetRootCertificate(context.Context, *emptypb.Empty) (*httpbody.HttpBody, error) // contains filtered or unexported methods }
CAServer is the server API for CA service. All implementations must embed UnimplementedCAServer for forward compatibility.
This implements the pre-GA HTTP-based Fulcio API. This interface is deprecated and will only receive backports of security-related features - clients should prefer the GA GRPC interface!
type CreateSigningCertificateRequest ¶
type CreateSigningCertificateRequest struct { // The public key to be stored in the requested certificate // // Deprecated: Marked as deprecated in fulcio_legacy.proto. PublicKey *PublicKey `protobuf:"bytes,1,opt,name=publicKey,proto3" json:"publicKey,omitempty"` // Proof that the client possesses the private key // // Deprecated: Marked as deprecated in fulcio_legacy.proto. SignedEmailAddress []byte `protobuf:"bytes,2,opt,name=signedEmailAddress,proto3" json:"signedEmailAddress,omitempty"` // Optional: PKCS#10 PEM-encoded certificate signing request // Contains the public key to be stored in the requested // certificate. All other CSR fields are ignored. Since // the CSR is self-signed, it also acts as a proof of // possession of the private key. // // In particular, the CSR's subject name is not verified, or tested for // compatibility with its specified X.509 name type (e.g. email address). // // Deprecated: Marked as deprecated in fulcio_legacy.proto. CertificateSigningRequest []byte `protobuf:"bytes,3,opt,name=certificateSigningRequest,proto3" json:"certificateSigningRequest,omitempty"` // contains filtered or unexported fields }
func (*CreateSigningCertificateRequest) Descriptor
deprecated
func (*CreateSigningCertificateRequest) Descriptor() ([]byte, []int)
Deprecated: Use CreateSigningCertificateRequest.ProtoReflect.Descriptor instead.
func (*CreateSigningCertificateRequest) GetCertificateSigningRequest
deprecated
func (x *CreateSigningCertificateRequest) GetCertificateSigningRequest() []byte
Deprecated: Marked as deprecated in fulcio_legacy.proto.
func (*CreateSigningCertificateRequest) GetPublicKey
deprecated
func (x *CreateSigningCertificateRequest) GetPublicKey() *PublicKey
Deprecated: Marked as deprecated in fulcio_legacy.proto.
func (*CreateSigningCertificateRequest) GetSignedEmailAddress
deprecated
func (x *CreateSigningCertificateRequest) GetSignedEmailAddress() []byte
Deprecated: Marked as deprecated in fulcio_legacy.proto.
func (*CreateSigningCertificateRequest) ProtoMessage ¶
func (*CreateSigningCertificateRequest) ProtoMessage()
func (*CreateSigningCertificateRequest) ProtoReflect ¶
func (x *CreateSigningCertificateRequest) ProtoReflect() protoreflect.Message
func (*CreateSigningCertificateRequest) Reset ¶
func (x *CreateSigningCertificateRequest) Reset()
func (*CreateSigningCertificateRequest) String ¶
func (x *CreateSigningCertificateRequest) String() string
type PublicKey ¶
type PublicKey struct { // The cryptographic algorithm to use with the key material // // Deprecated: Marked as deprecated in fulcio_legacy.proto. Algorithm string `protobuf:"bytes,1,opt,name=algorithm,proto3" json:"algorithm,omitempty"` // PKIX, ASN.1 DER or PEM-encoded public key. PEM is typically // of type PUBLIC KEY. // // Deprecated: Marked as deprecated in fulcio_legacy.proto. Content []byte `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"` // contains filtered or unexported fields }
func (*PublicKey) Descriptor
deprecated
func (*PublicKey) GetAlgorithm
deprecated
func (*PublicKey) GetContent
deprecated
func (*PublicKey) ProtoMessage ¶
func (*PublicKey) ProtoMessage()
func (*PublicKey) ProtoReflect ¶
func (x *PublicKey) ProtoReflect() protoreflect.Message
type UnimplementedCAServer ¶
type UnimplementedCAServer struct{}
UnimplementedCAServer must be embedded to have forward compatible implementations.
NOTE: this should be embedded by value instead of pointer to avoid a nil pointer dereference when methods are called.
func (UnimplementedCAServer) CreateSigningCertificate ¶
func (UnimplementedCAServer) CreateSigningCertificate(context.Context, *CreateSigningCertificateRequest) (*httpbody.HttpBody, error)
func (UnimplementedCAServer) GetRootCertificate ¶
type UnsafeCAServer ¶
type UnsafeCAServer interface {
// contains filtered or unexported methods
}
UnsafeCAServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to CAServer will result in compilation errors.