attestor

Documentation

Index

• func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool
• type AttestationResult
• type Attestor
  • func New(config *Config) Attestor
• type Config
• type ServerStream
  • func (ss *ServerStream) SendAttestationData(ctx context.Context, attestationData nodeattestor.AttestationData) ([]byte, error)
  • func (ss *ServerStream) SendChallengeResponse(ctx context.Context, response []byte) ([]byte, error)

Functions

func IsSVIDExpired

func IsSVIDExpired(svid []*x509.Certificate, timeNow func() time.Time) bool

IsSVIDExpired returns true if the X.509 SVID provided is expired

Types

type AttestationResult

type AttestationResult struct {
	SVID         []*x509.Certificate
	Key          keymanager.Key
	Bundle       *spiffebundle.Bundle
	Reattestable bool
}

type Attestor

type Attestor interface {
	Attest(ctx context.Context) (*AttestationResult, error)
}

func New

func New(config *Config) Attestor

type Config

type Config struct {
	Catalog           catalog.Catalog
	Metrics           telemetry.Metrics
	JoinToken         string
	TrustDomain       spiffeid.TrustDomain
	TrustBundle       []*x509.Certificate
	InsecureBootstrap bool
	Storage           storage.Storage
	Log               logrus.FieldLogger
	ServerAddress     string
	NodeAttestor      nodeattestor.NodeAttestor
}

type ServerStream

type ServerStream struct {
	Client       agentv1.AgentClient
	Csr          []byte
	Log          logrus.FieldLogger
	SVID         []*x509.Certificate
	Reattestable bool
	// contains filtered or unexported fields
}

func (*ServerStream) SendAttestationData

func (ss *ServerStream) SendAttestationData(ctx context.Context, attestationData nodeattestor.AttestationData) ([]byte, error)

func (*ServerStream) SendChallengeResponse

func (ss *ServerStream) SendChallengeResponse(ctx context.Context, response []byte) ([]byte, error)