cert

Documentation

Index

• type CA
  • func NewCA() *CA
  • func (ca *CA) GenerateAndSignNodeCert(input *NodeCSRInput) (*Certificate, error)
  • func (ca *CA) GenerateCACert(input *CACSRInput) (*Certificate, error)
  • func (ca *CA) SetCACert(cert *Certificate) error
• type CACSRInput
• type CaPaths
• type Cert
• type CertStorage
• type Certificate
  • func NewCertificateFromFile(certFilePath, keyFilePath, csrFilePath string) (*Certificate, error)
  • func (c *Certificate) Write(certPath, keyPath, csrPath string) error
• type LocalDirCertStorage
  • func NewLocalDirCertStorage(paths CaPaths) *LocalDirCertStorage
  • func (c *LocalDirCertStorage) LoadCaCert() (*Certificate, error)
  • func (c *LocalDirCertStorage) LoadNodeCert(nodeName string) (*Certificate, error)
  • func (c *LocalDirCertStorage) StoreCaCert(cert *Certificate) error
  • func (c *LocalDirCertStorage) StoreNodeCert(nodeName string, cert *Certificate) error
• type NodeCSRInput

Types

type CA

type CA struct {
	// contains filtered or unexported fields
}

CA is a Certificate Authority.

func NewCA

func NewCA() *CA

NewCA initializes a Certificate Authority.

func (*CA) GenerateAndSignNodeCert

func (ca *CA) GenerateAndSignNodeCert(input *NodeCSRInput) (*Certificate, error)

GenerateAndSignNodeCert generates and signs a node certificate, key and CSR based on the provided input and signs it with the CA.

func (*CA) GenerateCACert

func (ca *CA) GenerateCACert(input *CACSRInput) (*Certificate, error)

GenerateCACert generates a CA certificate, key and CSR based on the provided input.

func (*CA) SetCACert

func (ca *CA) SetCACert(cert *Certificate) error

SetCACert sets the CA certificate with the provided certificate and key.

type CACSRInput

type CACSRInput struct {
	CommonName       string
	Country          string
	Locality         string
	Organization     string
	OrganizationUnit string
	Expiry           time.Duration
	KeySize          int
}

CACSRInput struct.

type CaPaths

type CaPaths interface {
	NodeCertAbsFilename(identifier string) string
	NodeCertKeyAbsFilename(identifier string) string
	NodeCertCSRAbsFilename(identifier string) string
	NodeTLSDir(string) string
	CaCertAbsFilename() string
	CaKeyAbsFilename() string
	CaCSRAbsFilename() string
}

type Cert

type Cert struct {
	*CA
	CertStorage
}

Cert is a wrapper struct for the Certificate Authority and the Certificate Storage.

type CertStorage

type CertStorage interface {
	LoadCaCert() (*Certificate, error)
	LoadNodeCert(nodeName string) (*Certificate, error)
	StoreCaCert(cert *Certificate) error
	StoreNodeCert(nodeName string, cert *Certificate) error
}

CertStorage is an interface that wraps methods to load and store certificates.

type Certificate

type Certificate struct {
	Cert []byte
	Key  []byte
	Csr  []byte
}

Certificate stores the combination of Cert and Key along with the CSR if available.

func NewCertificateFromFile

func NewCertificateFromFile(certFilePath, keyFilePath, csrFilePath string) (*Certificate, error)

NewCertificateFromFile creates a new Certificate by loading cert, key and csr (if exists) from respecting files.

func (*Certificate) Write

func (c *Certificate) Write(certPath, keyPath, csrPath string) error

Write writes the cert, key and csr to disk.

type LocalDirCertStorage

type LocalDirCertStorage struct {
	// contains filtered or unexported fields
}

LocalDirCertStorage is a certificate storage, that stores certificates in a local directory.

func NewLocalDirCertStorage

func NewLocalDirCertStorage(paths CaPaths) *LocalDirCertStorage

NewLocalDirCertStorage inits a new LocalDirCertStorage.

func (*LocalDirCertStorage) LoadCaCert

func (c *LocalDirCertStorage) LoadCaCert() (*Certificate, error)

LoadCaCert loads the CA certificate from disk.

func (*LocalDirCertStorage) LoadNodeCert

func (c *LocalDirCertStorage) LoadNodeCert(nodeName string) (*Certificate, error)

LoadNodeCert loads the node certificate from disk. Used to load CA certificate as well, as CA certificate can be seen as node named "ca".

func (*LocalDirCertStorage) StoreCaCert

func (c *LocalDirCertStorage) StoreCaCert(cert *Certificate) error

StoreCaCert stores the given CA certificate, its key and CSR on disk.

func (*LocalDirCertStorage) StoreNodeCert

func (c *LocalDirCertStorage) StoreNodeCert(nodeName string, cert *Certificate) error

StoreNodeCert stores the given certificate in a file in the baseFolder.

type NodeCSRInput

type NodeCSRInput struct {
	Hosts            []string
	CommonName       string
	Country          string
	Locality         string
	Organization     string
	OrganizationUnit string
	Expiry           time.Duration
	KeySize          int
}

NodeCSRInput struct.