rotationutil

Documentation

Index

• func JWTSVIDExpired(svid *client.JWTSVID, now time.Time) bool
• func X509Expired(now time.Time, cert *x509.Certificate) bool
• type RotationStrategy
  • func NewRotationStrategy(x509AvailabilityTarget time.Duration) *RotationStrategy
  • func (rs *RotationStrategy) JWTSVIDExpiresSoon(svid *client.JWTSVID, now time.Time) bool
  • func (rs *RotationStrategy) ShouldFallbackX509DefaultRotation(lifetime time.Duration) bool
  • func (rs *RotationStrategy) ShouldRotateX509(now time.Time, cert *x509.Certificate) bool

Functions

func JWTSVIDExpired

func JWTSVIDExpired(svid *client.JWTSVID, now time.Time) bool

JWTSVIDExpired returns true if the given SVID is expired.

func X509Expired

func X509Expired(now time.Time, cert *x509.Certificate) bool

X509Expired returns true if the given X509 cert has expired

Types

type RotationStrategy

type RotationStrategy struct {
	// contains filtered or unexported fields
}

func NewRotationStrategy

func NewRotationStrategy(x509AvailabilityTarget time.Duration) *RotationStrategy

func (*RotationStrategy) JWTSVIDExpiresSoon

func (rs *RotationStrategy) JWTSVIDExpiresSoon(svid *client.JWTSVID, now time.Time) bool

JWTSVIDExpiresSoon determines if the given JWT SVID should be rotated based on presented current time, the JWT's expiration. Also returns true if the JWT is already expired.

func (*RotationStrategy) ShouldFallbackX509DefaultRotation

func (rs *RotationStrategy) ShouldFallbackX509DefaultRotation(lifetime time.Duration) bool

ShouldFallbackX509DefaultRotation returns true if the availability target is configured but the value is not enough against the SVID lifetime.

func (*RotationStrategy) ShouldRotateX509

func (rs *RotationStrategy) ShouldRotateX509(now time.Time, cert *x509.Certificate) bool

ShouldRotateX509 determines if a given SVID should be rotated, based on presented current time, and the certificate's expiration.