cert

Documentation

Index

• type CA
• type CACSRInput
• type CaPaths
• type Cert
• type CertStorage
• type Certificate
  • func NewCertificateFromFile(certFilePath, keyFilePath, csrFilePath string) (*Certificate, error)
  • func (c *Certificate) Write(certPath, keyPath, csrPath string) error
• type LocalDirCertStorage
  • func NewLocalDirCertStorage(paths CaPaths) *LocalDirCertStorage
  • func (c *LocalDirCertStorage) LoadCaCert() (*Certificate, error)
  • func (c *LocalDirCertStorage) LoadNodeCert(nodeName string) (*Certificate, error)
  • func (c *LocalDirCertStorage) StoreCaCert(cert *Certificate) error
  • func (c *LocalDirCertStorage) StoreNodeCert(nodeName string, cert *Certificate) error
• type NodeCSRInput

Types

type CA

type CA interface {
	// SetCACert sets CA Certificate to the CertificateAuthority implementation
	SetCACert(cert *Certificate) error
	// GenerateCACert generates a CA certificate, key and CSR based on the provided input.
	GenerateCACert(input *CACSRInput) (*Certificate, error)
	// GenerateAndSignNodeCert generates and signs a node certificate, key and CSR based on the provided input and signs it with the CA.
	GenerateAndSignNodeCert(input *NodeCSRInput) (*Certificate, error)
}

CA is an interface that wraps methods needed to generate CA and Node certificates.

type CACSRInput

type CACSRInput struct {
	CommonName       string
	Country          string
	Locality         string
	Organization     string
	OrganizationUnit string
	Expiry           string
}

CACSRInput struct.

type CaPaths

type CaPaths interface {
	NodeCertAbsFilename(identifier string) string
	NodeCertKeyAbsFilename(identifier string) string
	NodeCertCSRAbsFilename(identifier string) string
	NodeTLSDir(string) string
	CaDir() string
}

type Cert

type Cert struct {
	CA
	CertStorage
}

Cert is a wrapper struct for the Certificate Authority and the Certificate Storage interfaces.

type CertStorage

type CertStorage interface {
	LoadCaCert() (*Certificate, error)
	LoadNodeCert(nodeName string) (*Certificate, error)
	StoreCaCert(cert *Certificate) error
	StoreNodeCert(nodeName string, cert *Certificate) error
}

CertStorage is an interface that wraps methods to load and store certificates.

type Certificate

type Certificate struct {
	Cert []byte
	Key  []byte
	Csr  []byte
}

Certificate stores the combination of Cert and Key along with the CSR if available.

func NewCertificateFromFile

func NewCertificateFromFile(certFilePath, keyFilePath, csrFilePath string) (*Certificate, error)

NewCertificateFromFile creates a new Certificate by loading cert, key and csr (if exists) from respecting files.

func (*Certificate) Write

func (c *Certificate) Write(certPath, keyPath, csrPath string) error

Write writes the cert, key and csr to disk.

type LocalDirCertStorage

type LocalDirCertStorage struct {
	// contains filtered or unexported fields
}

LocalDirCertStorage is a certificate storage, that stores certificates in a local directory.

func NewLocalDirCertStorage

func NewLocalDirCertStorage(paths CaPaths) *LocalDirCertStorage

NewLocalDirCertStorage inits a new LocalDirCertStorage.

func (*LocalDirCertStorage) LoadCaCert

func (c *LocalDirCertStorage) LoadCaCert() (*Certificate, error)

LoadCaCert loads the CA certificate from disk.

func (*LocalDirCertStorage) LoadNodeCert

func (c *LocalDirCertStorage) LoadNodeCert(nodeName string) (*Certificate, error)

LoadNodeCert loads the node certificate from disk. Used to load CA certificate as well, as CA certificate can be seen as node named "ca".

func (*LocalDirCertStorage) StoreCaCert

func (c *LocalDirCertStorage) StoreCaCert(cert *Certificate) error

StoreCaCert stores the given CA certificate in a file in the baseFolder.

func (*LocalDirCertStorage) StoreNodeCert

func (c *LocalDirCertStorage) StoreNodeCert(nodeName string, cert *Certificate) error

StoreNodeCert stores the given certificate in a file in the baseFolder.

type NodeCSRInput

type NodeCSRInput struct {
	Hosts            []string
	CommonName       string
	Country          string
	Locality         string
	Organization     string
	OrganizationUnit string
	Expiry           string
}

NodeCSRInput struct.