vaultcas

Documentation

Index

• type VaultCAS
  • func New(ctx context.Context, opts apiv1.Options) (*VaultCAS, error)
  • func (v *VaultCAS) CreateCertificate(req *apiv1.CreateCertificateRequest) (*apiv1.CreateCertificateResponse, error)
  • func (v *VaultCAS) GetCertificateAuthority(req *apiv1.GetCertificateAuthorityRequest) (*apiv1.GetCertificateAuthorityResponse, error)
  • func (v *VaultCAS) RenewCertificate(req *apiv1.RenewCertificateRequest) (*apiv1.RenewCertificateResponse, error)
  • func (v *VaultCAS) RevokeCertificate(req *apiv1.RevokeCertificateRequest) (*apiv1.RevokeCertificateResponse, error)
• type VaultOptions

Types

type VaultCAS

type VaultCAS struct {
	// contains filtered or unexported fields
}

VaultCAS implements a Certificate Authority Service using Hashicorp Vault.

func New

func New(ctx context.Context, opts apiv1.Options) (*VaultCAS, error)

New creates a new CertificateAuthorityService implementation using Hashicorp Vault

func (*VaultCAS) CreateCertificate

func (v *VaultCAS) CreateCertificate(req *apiv1.CreateCertificateRequest) (*apiv1.CreateCertificateResponse, error)

CreateCertificate signs a new certificate using Hashicorp Vault.

func (*VaultCAS) GetCertificateAuthority

func (v *VaultCAS) GetCertificateAuthority(req *apiv1.GetCertificateAuthorityRequest) (*apiv1.GetCertificateAuthorityResponse, error)

GetCertificateAuthority returns the root certificate of the certificate authority using the configured fingerprint.

func (*VaultCAS) RenewCertificate

func (v *VaultCAS) RenewCertificate(req *apiv1.RenewCertificateRequest) (*apiv1.RenewCertificateResponse, error)

RenewCertificate will always return a non-implemented error as renewals are not supported yet.

func (*VaultCAS) RevokeCertificate

func (v *VaultCAS) RevokeCertificate(req *apiv1.RevokeCertificateRequest) (*apiv1.RevokeCertificateResponse, error)

RevokeCertificate revokes a certificate by serial number.

type VaultOptions

type VaultOptions struct {
	PKIMountPath   string          `json:"pkiMountPath,omitempty"`
	PKIRoleDefault string          `json:"pkiRoleDefault,omitempty"`
	PKIRoleRSA     string          `json:"pkiRoleRSA,omitempty"`
	PKIRoleEC      string          `json:"pkiRoleEC,omitempty"`
	PKIRoleEd25519 string          `json:"pkiRoleEd25519,omitempty"`
	AuthType       string          `json:"authType,omitempty"`
	AuthMountPath  string          `json:"authMountPath,omitempty"`
	AuthOptions    json.RawMessage `json:"authOptions,omitempty"`
}

VaultOptions defines the configuration options added using the apiv1.Options.Config field.