certificate

Documentation

Index

• type Certificate
  • func New(privateKey, publicKey []byte) *Certificate
  • func (c *Certificate) RevokeKeys(serialIDs ...int64) ([]byte, error)
  • func (c *Certificate) SignCert(passphrase []byte, publicKey []byte, serial uint64, id, principal string, ...) ([]byte, error)

Types

type Certificate

type Certificate struct {
	// contains filtered or unexported fields
}

func New

func New(privateKey, publicKey []byte) *Certificate

func (*Certificate) RevokeKeys

func (c *Certificate) RevokeKeys(serialIDs ...int64) ([]byte, error)

RevokeKeys revokes a list of keys golang.org/x/crypto/ssh not support revoke keys, use ssh-keygen -k to revoke keys e.g ssh-keygen -k -f revoked-keys -s ca list-to-revoke FIXME: if golang.org/x/crypto/ssh support revoke keys, replace this function

func (*Certificate) SignCert

func (c *Certificate) SignCert(
	passphrase []byte,
	publicKey []byte,
	serial uint64, id, principal string,
	validAfter uint64, validBefore uint64,
) ([]byte, error)

SignCert signs a certificate