attestor

Documentation

Index

• func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool
• type AttestationResult
• type Attestor
  • func New(config *Config) Attestor
• type Config

Functions

func IsSVIDExpired

func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool

IsSVIDExpired returns true if the X.509 SVID provided is expired

Types

type AttestationResult

type AttestationResult struct {
	SVID   []*x509.Certificate
	Key    keymanager.Key
	Bundle *bundleutil.Bundle
}

type Attestor

type Attestor interface {
	Attest(ctx context.Context) (*AttestationResult, error)
}

func New

func New(config *Config) Attestor

type Config

type Config struct {
	Catalog           catalog.Catalog
	Metrics           telemetry.Metrics
	JoinToken         string
	TrustDomain       spiffeid.TrustDomain
	TrustBundle       []*x509.Certificate
	InsecureBootstrap bool
	BundleCachePath   string
	SVIDCachePath     string
	Log               logrus.FieldLogger
	ServerAddress     string
}