softcas

Documentation

Index

• type SoftCAS
  • func New(ctx context.Context, opts apiv1.Options) (*SoftCAS, error)
  • func (c *SoftCAS) CreateCertificate(req *apiv1.CreateCertificateRequest) (*apiv1.CreateCertificateResponse, error)
  • func (c *SoftCAS) CreateCertificateAuthority(req *apiv1.CreateCertificateAuthorityRequest) (*apiv1.CreateCertificateAuthorityResponse, error)
  • func (c *SoftCAS) RenewCertificate(req *apiv1.RenewCertificateRequest) (*apiv1.RenewCertificateResponse, error)
  • func (c *SoftCAS) RevokeCertificate(req *apiv1.RevokeCertificateRequest) (*apiv1.RevokeCertificateResponse, error)

Types

type SoftCAS

type SoftCAS struct {
	CertificateChain  []*x509.Certificate
	Signer            crypto.Signer
	CertificateSigner func() ([]*x509.Certificate, crypto.Signer, error)
	KeyManager        kms.KeyManager
}

SoftCAS implements a Certificate Authority Service using Golang or KMS crypto. This is the default CAS used in step-ca.

func New

func New(ctx context.Context, opts apiv1.Options) (*SoftCAS, error)

New creates a new CertificateAuthorityService implementation using Golang or KMS crypto.

func (*SoftCAS) CreateCertificate

func (c *SoftCAS) CreateCertificate(req *apiv1.CreateCertificateRequest) (*apiv1.CreateCertificateResponse, error)

CreateCertificate signs a new certificate using Golang or KMS crypto.

func (*SoftCAS) CreateCertificateAuthority

func (c *SoftCAS) CreateCertificateAuthority(req *apiv1.CreateCertificateAuthorityRequest) (*apiv1.CreateCertificateAuthorityResponse, error)

CreateCertificateAuthority creates a root or an intermediate certificate.

func (*SoftCAS) RenewCertificate

func (c *SoftCAS) RenewCertificate(req *apiv1.RenewCertificateRequest) (*apiv1.RenewCertificateResponse, error)

RenewCertificate signs the given certificate template using Golang or KMS crypto.

func (*SoftCAS) RevokeCertificate

func (c *SoftCAS) RevokeCertificate(req *apiv1.RevokeCertificateRequest) (*apiv1.RevokeCertificateResponse, error)

RevokeCertificate revokes the given certificate in step-ca. In SoftCAS this operation is a no-op as the actual revoke will happen when we store the entry in the db.