dsse

Documentation

Index

• Constants
• func TryParseCertificate(data []byte) (*x509.Certificate, error)
• type Envelope
  • func Sign(bodyType string, body io.Reader, signers ...cryptoutil.Signer) (Envelope, error)
  • func (e Envelope) Verify(opts ...VerificationOption) ([]cryptoutil.Verifier, error)
• type ErrNoMatchingSigs
  • func (e ErrNoMatchingSigs) Error() string
• type ErrNoSignatures
  • func (e ErrNoSignatures) Error() string
• type Signature
  • func NewSignature(keyID string, sig []byte, opts ...SignatureOption) Signature
• type SignatureOption
  • func SignatureWithCertificate(certBytes []byte) SignatureOption
  • func SignatureWithIntermediates(intermediates [][]byte) SignatureOption
  • func SignatureWithTrustedTime(trustedTime time.Time) SignatureOption
• type VerificationOption
  • func WithIntermediates(intermediates []*x509.Certificate) VerificationOption
  • func WithRoots(roots []*x509.Certificate) VerificationOption
  • func WithVerifiers(verifiers []cryptoutil.Verifier) VerificationOption

Constants

const PemTypeCertificate = "CERTIFICATE"

Functions

func TryParseCertificate

func TryParseCertificate(data []byte) (*x509.Certificate, error)

Types

type Envelope

type Envelope struct {
	Payload     []byte      `json:"payload"`
	PayloadType string      `json:"payloadType"`
	Signatures  []Signature `json:"signatures"`
}

func Sign

func Sign(bodyType string, body io.Reader, signers ...cryptoutil.Signer) (Envelope, error)

TODO: it'd be nice to break some of this logic out of what should be a presentation layer only

func (Envelope) Verify

func (e Envelope) Verify(opts ...VerificationOption) ([]cryptoutil.Verifier, error)

type ErrNoMatchingSigs

type ErrNoMatchingSigs struct{}

func (ErrNoMatchingSigs) Error

func (e ErrNoMatchingSigs) Error() string

type ErrNoSignatures

type ErrNoSignatures struct{}

func (ErrNoSignatures) Error

func (e ErrNoSignatures) Error() string

type Signature

type Signature struct {
	KeyID         string   `json:"keyid"`
	Signature     []byte   `json:"sig"`
	Certificate   []byte   `json:"certificate,omitempty"`
	Intermediates [][]byte `json:"intermediates,omitempty"`
	// contains filtered or unexported fields
}

func NewSignature

func NewSignature(keyID string, sig []byte, opts ...SignatureOption) Signature

type SignatureOption

type SignatureOption func(so *signatureOptions)

func SignatureWithCertificate

func SignatureWithCertificate(certBytes []byte) SignatureOption

func SignatureWithIntermediates

func SignatureWithIntermediates(intermediates [][]byte) SignatureOption

func SignatureWithTrustedTime

func SignatureWithTrustedTime(trustedTime time.Time) SignatureOption

type VerificationOption

type VerificationOption func(*verificationOptions)

func WithIntermediates

func WithIntermediates(intermediates []*x509.Certificate) VerificationOption

func WithRoots

func WithRoots(roots []*x509.Certificate) VerificationOption

func WithVerifiers

func WithVerifiers(verifiers []cryptoutil.Verifier) VerificationOption