tlsutil

Documentation

Index

• Constants
• Variables
• func DecodeCertificatePEM(data []byte) (*x509.Certificate, error)
• func DecodeCertificatesPEM(data []byte) ([]*x509.Certificate, error)
• func DecodePrivateKeyPEM(data []byte) (*rsa.PrivateKey, error)
• func EncodeCertificatePEM(cert *x509.Certificate) []byte
• func EncodePrivateKeyPEM(key *rsa.PrivateKey) []byte
• func IsCertificatePEM(data []byte) bool
• func NewPrivateKey() (*rsa.PrivateKey, error)
• func NewSelfSignedCACertificate(cfg CACertConfig, key *rsa.PrivateKey) (*x509.Certificate, error)
• func NewSignedClientCertificate(cfg ClientCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, ...) (*x509.Certificate, error)
• func NewSignedKIAMCertificate(cfg ClientCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, ...) (*x509.Certificate, error)
• func NewSignedServerCertificate(cfg ServerCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, ...) (*x509.Certificate, error)
• type CACertConfig
• type ClientCertConfig
• type ServerCertConfig

Constants

const (
	RSAKeySize = 2048
)

Variables

var (
	Duration365d = time.Hour * 24 * 365
)

Functions

func DecodeCertificatePEM

func DecodeCertificatePEM(data []byte) (*x509.Certificate, error)

func DecodeCertificatesPEM

func DecodeCertificatesPEM(data []byte) ([]*x509.Certificate, error)

func DecodePrivateKeyPEM

func DecodePrivateKeyPEM(data []byte) (*rsa.PrivateKey, error)

func EncodeCertificatePEM

func EncodeCertificatePEM(cert *x509.Certificate) []byte

func EncodePrivateKeyPEM

func EncodePrivateKeyPEM(key *rsa.PrivateKey) []byte

func IsCertificatePEM

func IsCertificatePEM(data []byte) bool

func NewPrivateKey

func NewPrivateKey() (*rsa.PrivateKey, error)

func NewSelfSignedCACertificate

func NewSelfSignedCACertificate(cfg CACertConfig, key *rsa.PrivateKey) (*x509.Certificate, error)

func NewSignedClientCertificate

func NewSignedClientCertificate(cfg ClientCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, error)

func NewSignedKIAMCertificate

func NewSignedKIAMCertificate(cfg ClientCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, error)

func NewSignedServerCertificate

func NewSignedServerCertificate(cfg ServerCertConfig, key *rsa.PrivateKey, caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, error)

Types

type CACertConfig

type CACertConfig struct {
	CommonName   string
	Organization string
	Duration     time.Duration
}

type ClientCertConfig

type ClientCertConfig struct {
	CommonName   string
	Organization []string
	DNSNames     []string
	IPAddresses  []string
	Duration     time.Duration
}

type ServerCertConfig

type ServerCertConfig struct {
	CommonName  string
	DNSNames    []string
	IPAddresses []string
	Duration    time.Duration
}