cert

May 17, 2023

Changes in this version

+ const ECDSAP256PrivateKeyBanner

+ const EncryptedECDSAP256PrivateKeyBanner

+ const EncryptedEd25519PrivateKeyBanner

+ const P256PrivateKeyBanner

+ const P256PublicKeyBanner

+ var Curve_name = map[int32]string

+ var Curve_value = map[string]int32

+ var ErrBlockListed = errors.New("certificate is in the block list")

+ var ErrPrivateKeyEncrypted = errors.New("private key must be decrypted")

+ var ErrRootExpired = errors.New("root certificate is expired")

+ var ErrSignatureMismatch = errors.New("certificate signature did not match")

+ func EncryptAndMarshalSigningPrivateKey(curve Curve, b []byte, passphrase []byte, kdfParams *Argon2Parameters) ([]byte, error)

+ func MarshalPrivateKey(curve Curve, b []byte) []byte

+ func MarshalPublicKey(curve Curve, b []byte) []byte

+ func MarshalSigningPrivateKey(curve Curve, b []byte) []byte

+ type Argon2Parameters struct

+ Iterations uint32

+ Memory uint32

+ Parallelism uint8

+ func NewArgon2Parameters(memory uint32, parallelism uint8, iterations uint32) *Argon2Parameters

+ type Curve int32

+ const Curve_CURVE25519

+ const Curve_P256

+ func DecryptAndUnmarshalSigningPrivateKey(passphrase, b []byte) (Curve, []byte, []byte, error)

+ func UnmarshalPrivateKey(b []byte) ([]byte, []byte, Curve, error)

+ func UnmarshalPublicKey(b []byte) ([]byte, []byte, Curve, error)

+ func UnmarshalSigningPrivateKey(b []byte) ([]byte, []byte, Curve, error)

+ func (Curve) Descriptor() protoreflect.EnumDescriptor

+ func (Curve) EnumDescriptor() ([]byte, []int)

+ func (Curve) Type() protoreflect.EnumType

+ func (x Curve) Enum() *Curve

+ func (x Curve) Number() protoreflect.EnumNumber

+ func (x Curve) String() string

type NebulaCertificate

+ func (nc *NebulaCertificate) ResetCache()

+ func (nc *NebulaCertificate) VerifyWithCache(t time.Time, ncp *NebulaCAPool) (bool, error)

type NebulaCertificateDetails

+ Curve Curve

+ type NebulaEncryptedData struct

+ Ciphertext []byte

+ EncryptionMetadata NebulaEncryptionMetadata

+ func UnmarshalNebulaEncryptedData(b []byte) (*NebulaEncryptedData, error)

+ type NebulaEncryptionMetadata struct

+ Argon2Parameters Argon2Parameters

+ EncryptionAlgorithm string

+ type RawNebulaArgon2Parameters struct

+ Iterations uint32

+ Memory uint32

+ Parallelism uint32

+ Salt []byte

+ Version int32

+ func (*RawNebulaArgon2Parameters) Descriptor() ([]byte, []int)

+ func (*RawNebulaArgon2Parameters) ProtoMessage()

+ func (x *RawNebulaArgon2Parameters) GetIterations() uint32

+ func (x *RawNebulaArgon2Parameters) GetMemory() uint32

+ func (x *RawNebulaArgon2Parameters) GetParallelism() uint32

+ func (x *RawNebulaArgon2Parameters) GetSalt() []byte

+ func (x *RawNebulaArgon2Parameters) GetVersion() int32

+ func (x *RawNebulaArgon2Parameters) ProtoReflect() protoreflect.Message

+ func (x *RawNebulaArgon2Parameters) Reset()

+ func (x *RawNebulaArgon2Parameters) String() string

type RawNebulaCertificateDetails

+ Curve Curve

+ func (x *RawNebulaCertificateDetails) GetCurve() Curve

+ type RawNebulaEncryptedData struct

+ Ciphertext []byte

+ EncryptionMetadata *RawNebulaEncryptionMetadata

+ func (*RawNebulaEncryptedData) Descriptor() ([]byte, []int)

+ func (*RawNebulaEncryptedData) ProtoMessage()

+ func (x *RawNebulaEncryptedData) GetCiphertext() []byte

+ func (x *RawNebulaEncryptedData) GetEncryptionMetadata() *RawNebulaEncryptionMetadata

+ func (x *RawNebulaEncryptedData) ProtoReflect() protoreflect.Message

+ func (x *RawNebulaEncryptedData) Reset()

+ func (x *RawNebulaEncryptedData) String() string

+ type RawNebulaEncryptionMetadata struct

+ Argon2Parameters *RawNebulaArgon2Parameters

+ EncryptionAlgorithm string

+ func (*RawNebulaEncryptionMetadata) Descriptor() ([]byte, []int)

+ func (*RawNebulaEncryptionMetadata) ProtoMessage()

+ func (x *RawNebulaEncryptionMetadata) GetArgon2Parameters() *RawNebulaArgon2Parameters

+ func (x *RawNebulaEncryptionMetadata) GetEncryptionAlgorithm() string

+ func (x *RawNebulaEncryptionMetadata) ProtoReflect() protoreflect.Message

+ func (x *RawNebulaEncryptionMetadata) Reset()

+ func (x *RawNebulaEncryptionMetadata) String() string

Dec 14, 2021

Changes in this version

+ var ErrExpired = errors.New("certificate is expired")

+ var ErrNotCA = errors.New("certificate is not a CA")

+ var ErrNotSelfSigned = errors.New("certificate is not self-signed")

May 11, 2021

Changes in this version

+ var File_cert_proto protoreflect.FileDescriptor

type RawNebulaCertificate

+ func (x *RawNebulaCertificate) ProtoReflect() protoreflect.Message

type RawNebulaCertificateDetails

+ func (x *RawNebulaCertificateDetails) ProtoReflect() protoreflect.Message

Sep 22, 2020

Changes in this version

type NebulaCAPool

+ func (ncp *NebulaCAPool) BlocklistFingerprint(f string)

+ func (ncp *NebulaCAPool) IsBlocklisted(c *NebulaCertificate) bool

+ func (ncp *NebulaCAPool) ResetCertBlocklist()

type NebulaCertificate

+ func (nc *NebulaCertificate) Copy() *NebulaCertificate

Jan 17, 2020

Changes in this version

type NebulaCertificate

+ func (nc *NebulaCertificate) CheckRootConstrains(signer *NebulaCertificate) error

Nov 19, 2019

Changes in this version

+ const CertBanner

+ const Ed25519PrivateKeyBanner

+ const Ed25519PublicKeyBanner

+ const X25519PrivateKeyBanner

+ const X25519PublicKeyBanner

+ func MarshalEd25519PrivateKey(key ed25519.PrivateKey) []byte

+ func MarshalEd25519PublicKey(key ed25519.PublicKey) []byte

+ func MarshalX25519PrivateKey(b []byte) []byte

+ func MarshalX25519PublicKey(b []byte) []byte

+ func UnmarshalEd25519PrivateKey(b []byte) (ed25519.PrivateKey, []byte, error)

+ func UnmarshalEd25519PublicKey(b []byte) (ed25519.PublicKey, []byte, error)

+ func UnmarshalX25519PrivateKey(b []byte) ([]byte, []byte, error)

+ func UnmarshalX25519PublicKey(b []byte) ([]byte, []byte, error)

+ type NebulaCAPool struct

+ CAs map[string]*NebulaCertificate

+ func NewCAPool() *NebulaCAPool

+ func NewCAPoolFromBytes(caPEMs []byte) (*NebulaCAPool, error)

+ func (ncp *NebulaCAPool) AddCACertificate(pemBytes []byte) ([]byte, error)

+ func (ncp *NebulaCAPool) BlacklistFingerprint(f string)

+ func (ncp *NebulaCAPool) GetCAForCert(c *NebulaCertificate) (*NebulaCertificate, error)

+ func (ncp *NebulaCAPool) GetFingerprints() []string

+ func (ncp *NebulaCAPool) IsBlacklisted(c *NebulaCertificate) bool

+ func (ncp *NebulaCAPool) ResetCertBlacklist()

+ type NebulaCertificate struct

+ Details NebulaCertificateDetails

+ Signature []byte

+ func UnmarshalNebulaCertificate(b []byte) (*NebulaCertificate, error)

+ func UnmarshalNebulaCertificateFromPEM(b []byte) (*NebulaCertificate, []byte, error)

+ func (nc *NebulaCertificate) CheckSignature(key ed25519.PublicKey) bool

+ func (nc *NebulaCertificate) Expired(t time.Time) bool

+ func (nc *NebulaCertificate) Marshal() ([]byte, error)

+ func (nc *NebulaCertificate) MarshalJSON() ([]byte, error)

+ func (nc *NebulaCertificate) MarshalToPEM() ([]byte, error)

+ func (nc *NebulaCertificate) Sha256Sum() (string, error)

+ func (nc *NebulaCertificate) Sign(key ed25519.PrivateKey) error

+ func (nc *NebulaCertificate) String() string

+ func (nc *NebulaCertificate) Verify(t time.Time, ncp *NebulaCAPool) (bool, error)

+ func (nc *NebulaCertificate) VerifyPrivateKey(key []byte) error

+ type NebulaCertificateDetails struct

+ Groups []string

+ InvertedGroups map[string]struct{}

+ Ips []*net.IPNet

+ IsCA bool

+ Issuer string

+ Name string

+ NotAfter time.Time

+ NotBefore time.Time

+ PublicKey []byte

+ Subnets []*net.IPNet

+ type RawNebulaCertificate struct

+ Details *RawNebulaCertificateDetails

+ Signature []byte

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RawNebulaCertificate) Descriptor() ([]byte, []int)

+ func (*RawNebulaCertificate) ProtoMessage()

+ func (m *RawNebulaCertificate) GetDetails() *RawNebulaCertificateDetails

+ func (m *RawNebulaCertificate) GetSignature() []byte

+ func (m *RawNebulaCertificate) Reset()

+ func (m *RawNebulaCertificate) String() string

+ func (m *RawNebulaCertificate) XXX_DiscardUnknown()

+ func (m *RawNebulaCertificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RawNebulaCertificate) XXX_Merge(src proto.Message)

+ func (m *RawNebulaCertificate) XXX_Size() int

+ func (m *RawNebulaCertificate) XXX_Unmarshal(b []byte) error

+ type RawNebulaCertificateDetails struct

+ Groups []string

+ Ips []uint32

+ IsCA bool

+ Issuer []byte

+ Name string

+ NotAfter int64

+ NotBefore int64

+ PublicKey []byte

+ Subnets []uint32

+ XXX_NoUnkeyedLiteral struct{}

+ XXX_sizecache int32

+ XXX_unrecognized []byte

+ func (*RawNebulaCertificateDetails) Descriptor() ([]byte, []int)

+ func (*RawNebulaCertificateDetails) ProtoMessage()

+ func (m *RawNebulaCertificateDetails) GetGroups() []string

+ func (m *RawNebulaCertificateDetails) GetIps() []uint32

+ func (m *RawNebulaCertificateDetails) GetIsCA() bool

+ func (m *RawNebulaCertificateDetails) GetIssuer() []byte

+ func (m *RawNebulaCertificateDetails) GetName() string

+ func (m *RawNebulaCertificateDetails) GetNotAfter() int64

+ func (m *RawNebulaCertificateDetails) GetNotBefore() int64

+ func (m *RawNebulaCertificateDetails) GetPublicKey() []byte

+ func (m *RawNebulaCertificateDetails) GetSubnets() []uint32

+ func (m *RawNebulaCertificateDetails) Reset()

+ func (m *RawNebulaCertificateDetails) String() string

+ func (m *RawNebulaCertificateDetails) XXX_DiscardUnknown()

+ func (m *RawNebulaCertificateDetails) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

+ func (m *RawNebulaCertificateDetails) XXX_Merge(src proto.Message)

+ func (m *RawNebulaCertificateDetails) XXX_Size() int

+ func (m *RawNebulaCertificateDetails) XXX_Unmarshal(b []byte) error