attestor

Documentation

Index

• func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool
• type AttestationResult
• type Attestor
  • func New(config *Config) Attestor
• type Config

Functions

func IsSVIDExpired

func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool

IsSVIDExpired returns true if the X.509 SVID provided is expired

Types

type AttestationResult

type AttestationResult struct {
	SVID   []*x509.Certificate
	Key    *ecdsa.PrivateKey
	Bundle *bundleutil.Bundle
}

type Attestor

type Attestor interface {
	Attest(ctx context.Context) (*AttestationResult, error)
}

func New

func New(config *Config) Attestor

type Config

type Config struct {
	Catalog               catalog.Catalog
	Metrics               telemetry.Metrics
	JoinToken             string
	TrustDomain           url.URL
	TrustBundle           []*x509.Certificate
	InsecureBootstrap     bool
	BundleCachePath       string
	SVIDCachePath         string
	Log                   logrus.FieldLogger
	ServerAddress         string
	CreateNewAgentClient  func(grpc.ClientConnInterface) agent.AgentClient
	CreateNewBundleClient func(grpc.ClientConnInterface) bundle.BundleClient
}