signature

Documentation

Index

• type AferoSink
  • func NewAferoSink(filePath string) (*AferoSink, error)
  • func (s *AferoSink) CanRead() error
  • func (s *AferoSink) CanWrite() error
  • func (s *AferoSink) Read() ([]byte, error)
  • func (s *AferoSink) Write(signedData string) error
• type BufferSink
  • func (b *BufferSink) CanRead() error
  • func (b *BufferSink) CanWrite() error
  • func (b *BufferSink) Read() ([]byte, error)
  • func (b *BufferSink) Write(signedData string) error
• type CertType
• type FileSink
  • func (fs *FileSink) CanRead() error
  • func (fs *FileSink) CanWrite() error
  • func (fs *FileSink) Read() ([]byte, error)
  • func (fs *FileSink) Write(signedData string) error
• type Issuer
  • func NewIssuer(signer Signer, refresh ssh.RefreshSignatureStrategy) (*Issuer, error)
  • func (i *Issuer) SignHostCert(conf *config.Config, pubKey, signedKey Sink) error
  • func (i *Issuer) SignUserCert(conf *config.Config, pubKey, signedKey Sink) error
• type SignHostKeyRequest
• type SignUserKeyRequest
• type Signer
• type Sink

Types

type AferoSink

type AferoSink struct {
	// contains filtered or unexported fields
}

func NewAferoSink

func NewAferoSink(filePath string) (*AferoSink, error)

func (*AferoSink) CanRead

func (s *AferoSink) CanRead() error

func (*AferoSink) CanWrite

func (s *AferoSink) CanWrite() error

func (*AferoSink) Read

func (s *AferoSink) Read() ([]byte, error)

func (*AferoSink) Write

func (s *AferoSink) Write(signedData string) error

type BufferSink

type BufferSink struct {
	Data  []byte
	Print bool
}

func (*BufferSink) CanRead

func (b *BufferSink) CanRead() error

func (*BufferSink) CanWrite

func (b *BufferSink) CanWrite() error

func (*BufferSink) Read

func (b *BufferSink) Read() ([]byte, error)

func (*BufferSink) Write

func (b *BufferSink) Write(signedData string) error

type CertType

type CertType int

const (
	User CertType = 1 << iota
	Host CertType = 1 << iota
)

type FileSink

type FileSink struct {
	FilePath string
}

func (*FileSink) CanRead

func (fs *FileSink) CanRead() error

func (*FileSink) CanWrite

func (fs *FileSink) CanWrite() error

func (*FileSink) Read

func (fs *FileSink) Read() ([]byte, error)

func (*FileSink) Write

func (fs *FileSink) Write(signedData string) error

type Issuer

type Issuer struct {
	// contains filtered or unexported fields
}

func NewIssuer

func NewIssuer(signer Signer, refresh ssh.RefreshSignatureStrategy) (*Issuer, error)

func (*Issuer) SignHostCert

func (i *Issuer) SignHostCert(conf *config.Config, pubKey, signedKey Sink) error

func (*Issuer) SignUserCert

func (i *Issuer) SignUserCert(conf *config.Config, pubKey, signedKey Sink) error

type SignHostKeyRequest

type SignHostKeyRequest struct {
	PublicKey  string `validation:"required"`
	Ttl        int    `validation:"gte=86400"`
	Principals []string
	Extensions map[string]string
}

type SignUserKeyRequest

type SignUserKeyRequest struct {
	PublicKey  string `validation:"required"`
	Ttl        int    `validation:"gt=600"`
	Principals []string
	Extensions map[string]string
}

type Signer

type Signer interface {
	SignUserKey(req SignUserKeyRequest) (string, error)
	SignHostKey(req SignHostKeyRequest) (string, error)
	ReadCaCert() (string, error)
}

type Sink

type Sink interface {
	Read() ([]byte, error)
	CanRead() error
	Write(string) error
	CanWrite() error
}

Sink is a simple wrapper around a key (which is just a byte stream itself). This way, we decouple the implementation (file-based, memory, network, ..) and make it easily swap- and testable.