certutils

package module
v0.1.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 4, 2017 License: MIT Imports: 19 Imported by: 0

README

aws-cert-utils

Certificate Utility for AWS(ACM, IAM, ALB, ELB, CloudFront)

Installation

Download from https://github.com/tkuchiki/aws-cert-utils/releases

Usage

usage: aws-cert-utils [<flags>] <command> [<args> ...]

Certificate Utility for AWS(ACM, IAM, ALB, ELB, CloudFront)

Flags:
  --help                     Show context-sensitive help (also try --help-long
                             and --help-man).
  --access-key=ACCESS-KEY    The AWS access key ID
  --secret-key=SECRET-KEY    The AWS secret access key
  --assume-role-arn=ASSUME-ROLE-ARN  
                             The AWS assume role ARN
  --token=TOKEN              The AWS access token
  --region=REGION            The AWS region
  --profile=PROFILE          The AWS CLI profile
  --aws-config=AWS-CONFIG    The AWS CLI Config file
  --credentials=CREDENTIALS  The AWS CLI Credential file
  --version                  Show application version.

Commands:
  help [<command>...]
    Show help.

  acm list [<flags>]
    Retrieves a list of ACM Certificates and the domain name for each

  acm import [<flags>]
    Imports an SSL/TLS certificate into AWS Certificate Manager (ACM) to use
    with ACM's integrated AWS services

  acm delete [<flags>]
    Deletes an ACM Certificate and its associated private key

  iam list [<flags>]
    Lists the server certificates stored in IAM that have the specified path
    prefix

  iam upload [<flags>]
    Uploads a server certificate entity for the AWS account

  iam update [<flags>]
    Updates the name and/or the path of the specified server certificate stored
    in IAM

  iam delete [<flags>]
    Deletes the specified server certificate

  cloudfront list [<flags>]
    Lists the distributions

  cloudfront update [<flags>]
    Updates the configuration for a distribution

  cloudfront bulk-update [<flags>]
    Updates the configuration for distributions

  elb list [<flags>]
    Describes the specified the load balancers

  elb update [<flags>]
    Updates the specified a listener from the specified load balancer

  elb bulk-update [<flags>]
    Updates the specified listeners from the specified load balancer

  alb list [<flags>]
    Describes the specified load balancers

  alb update [<flags>]
    Updates the specified a listener from the specified load balancer

  alb bulk-update [<flags>]
    Updates the specified listeners from the specified load balancer
ACM
$ ./aws-cert-utils acm --help
usage: aws-cert-utils acm <command> [<args> ...]

AWS Certificate Manager (ACM)

Flags:
  --help     Show context-sensitive help (also try --help-long and --help-man).
  --version  Show application version.

Subcommands:
  acm list [<flags>]
    Retrieves a list of ACM Certificates and the domain name for each

  acm import [<flags>]
    Imports an SSL/TLS certificate into AWS Certificate Manager (ACM) to use with ACM's integrated AWS services

  acm delete [<flags>]
    Deletes an ACM Certificate and its associated private key
List
$ ./aws-cert-utils acm list
+------------------------+-----------------+-----------------+---------+-------------------------------+-------------------------------------------------------------------------------------+
|        NAME TAG        |   DOMAIN NAME   | ADDITIONAL NAME | IN USE? |           NOT AFTER           |                                   CERTIFICATE ARN                                   |
+------------------------+-----------------+-----------------+---------+-------------------------------+-------------------------------------------------------------------------------------+
|                        | *.example.com   | example.com     | Yes     | 2019-11-14 02:44:43 +0000 UTC | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+------------------------+                 +                 +         +                               +-------------------------------------------------------------------------------------+
| example.com            |                 |                 |         |                               | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy |
+------------------------+-----------------+-----------------+---------+-------------------------------+-------------------------------------------------------------------------------------+
Import
$ openssl rsa -in 4096key.pem -text -noout | head -n 1
Private-Key: (4096 bit)

$ ./aws-cert-utils acm import --cert-path 4096cert.pem --pkey-path 4096key.pem
2017/11/30 17:58:03 Invalid private key length (4096 bit). AWS supports 1024 and 2048 bit RSA private key

$ ./aws-cert-utils acm import --cert-path cert.pem --pkey-path key.pem --chain-path ca.pem
Imported arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzzzzzz
Delete
$ ./aws-cert-utils acm delete
? Choose the server certificate you want to delete : [example.com] arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzzzzzz
Deleted arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzzzzzz
IAM
$ ./aws-cert-utils iam --help
usage: aws-cert-utils iam <command> [<args> ...]

AWS Identity and Access Management (IAM)

Flags:
  --help     Show context-sensitive help (also try --help-long and --help-man).
  --version  Show application version.

Subcommands:
  iam list
    Lists the server certificates stored in IAM that have the specified path prefix

  iam upload [<flags>]
    Uploads a server certificate entity for the AWS account

  iam update [<flags>]
    Updates the name and/or the path of the specified server certificate stored in IAM

  iam delete [<flags>]
    Deletes the specified server certificate
List
$ ./aws-cert-utils iam list
+------------------------------+-----------------------+--------------------------------+-------------------------------------------------------------------------------------+
|             NAME             |          ID           |              PATH              |                                         ARN                                         |
+------------------------------+-----------------------+--------------------------------+-------------------------------------------------------------------------------------+
| test-certificate             | XXXXXXXXXXXXXXXXXXXXX | /                              | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
| test-cloudfront-certificate  | YYYYYYYYYYYYYYYYYYYYY | /cloudfront/                   | arn:aws:iam::xxxxxxxxxxxx:server-certificate/cloudfront/yyyyyyyyyyyyyyyyyyyyyyyyyyy |
+------------------------------+-----------------------+--------------------------------+-------------------------------------------------------------------------------------+
Upload
$ ./aws-cert-utils iam upload --cert-path cert.pem --chain-path ca.pem --pkey-path key.pem --path /cloudfront/ --name test-cert
Uploaded test-cert arn:aws:iam::xxxxxxxxxxxx:server-certificate/cloudfront/yyyyyyyyyyyyyyyyyyyyyyyyyyy
Update
$ ./aws-cert-utils iam update --new-path / --new-name test-cert2 --name test-cert
Updated test-cert -> test-cert2
Delete
$ ./aws-cert-utils iam delete
? Choose the server certificate you want to delete :  test-cert2
Deleted test-cert2
ALB
$ ./aws-cert-utils alb --help
usage: aws-cert-utils alb <command> [<args> ...]

Application Load Balancing

Flags:
  --help     Show context-sensitive help (also try --help-long and --help-man).
  --version  Show application version.

Subcommands:
  alb list [<flags>]
    Describes the specified load balancers

  alb update [<flags>]
    Updates the specified a listener from the specified load balancer

  alb bulk-update [<flags>]
    Updates the specified listeners from the specified load balancer
List
$ ./aws-cert-utils alb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-alb  |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-alb |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
Update
$ ./aws-cert-utils alb update --name test-alb --cert-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Updated test-alb:443 arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Bulk update
$ ./aws-cert-utils alb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-alb  |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-alb |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
  
$ ./aws-cert-utils alb bulk-update --source-cert-arn arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --dest-cert-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# Dry run mode

Updated test-alb:443 arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Updated test2-alb:443 arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

$ ./aws-cert-utils alb bulk-update --source-cert-arn arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --dest-cert-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --no-dry-run
Updated test-alb:443 arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Updated test2-alb:443 arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

$ ./aws-cert-utils alb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-alb  |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-alb |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
ELB
$ ./aws-cert-utils elb --help
usage: aws-cert-utils elb <command> [<args> ...]

Elastic Load Balancing

Flags:
  --help     Show context-sensitive help (also try --help-long and --help-man).
  --version  Show application version.

Subcommands:
  elb list [<flags>]
    Describes the specified the load balancers

  elb update [<flags>]
    Updates the specified a listener from the specified load balancer

  elb bulk-update [<flags>]
    Updates the specified listeners from the specified load balancer
List
$ ./aws-cert-utils elb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-elb  |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-elb |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
Update
$ ./aws-cert-utils elb update --name test-elb --port 443 --cert-arn arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Updated test-elb:443 arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -> arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Bulk update
$ ./aws-cert-utils elb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-elb  |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-elb |  443 | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+

$ ./aws-cert-utils elb bulk-update --source-cert-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --dest-cert-arn arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
# Dry run mode

Updated test-elb:443 arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -> arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Updated test2-elb:443 arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -> arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

$ ./aws-cert-utils elb bulk-update --source-cert-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --dest-cert-arn arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --no-dry-run
Updated test-elb:443 arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -> arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Updated test2-elb:443 arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -> arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

$ ./aws-cert-utils elb list
+-----------+------+-------------------------------------------------------------------------------------+
|   NAME    | PORT |                              LISTENER SSL CERTIFICATE                               |
+-----------+------+-------------------------------------------------------------------------------------+
| test-elb  |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
| test2-elb |  443 | arn:aws:iam::xxxxxxxxxxxx:server-certificate/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
+-----------+------+-------------------------------------------------------------------------------------+
CloudFront
$ ./aws-cert-utils cloudfront --help
usage: aws-cert-utils cloudfront [<flags>] <command> [<args> ...]

Amazon CloudFront

Flags:
  --help           Show context-sensitive help (also try --help-long and --help-man).
  --version        Show application version.
  --max-items=100  The total number of items to return in the command's output

Subcommands:
  cloudfront list [<flags>]
    Lists the distributions

  cloudfront update [<flags>]
    Updates the configuration for a distribution

  cloudfront bulk-update [<flags>]
    Updates the configuration for distributions
List
$ ./aws-cert-utils cloudfront list
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| DISTRIBUTION ID |           ALIASES            |                                   SSL CERTIFICATE                                   |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| 11111111111111  | iam.example.com              | XXXXXXXXXXXXXXXXXXXXX | test-cert-name                                              |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| 22222222222222  | acm.example.com              | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
Update
$ ./aws-cert-utils cloudfront update --dist-id 11111111111111 --iam-id XXXXXXXXXXXXXXXXXXXXX
Updated 11111111111111 iam.example.com XXXXXXXXXXXXXXXXXXXXX -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Bulk update
$ ./aws-cert-utils cloudfront list
+-----------------+------------------------------+-----------------------------------------------------------------+
| DISTRIBUTION ID |           ALIASES            |                         SSL CERTIFICATE                         |
+-----------------+------------------------------+-----------------------------------------------------------------+
| 11111111111111  | iam.example.com              | XXXXXXXXXXXXXXXXXXXXX | test-cert-name                          |
+-----------------+------------------------------+-----------------------------------------------------------------+
| 22222222222222  | iam2.example.com             | XXXXXXXXXXXXXXXXXXXXX | test-cert-name                          |
+-----------------+------------------------------+-----------------------------------------------------------------+

$ ./aws-cert-utils cloudfront bulk-update --source-iam-id XXXXXXXXXXXXXXXXXXXXX --dest-acm-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# Dry run mode

Updated 11111111111111 iam.example.com XXXXXXXXXXXXXXXXXXXXX -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Updated 22222222222222 iam2.example.com XXXXXXXXXXXXXXXXXXXXX -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

$ ./aws-cert-utils cloudfront bulk-update --source-iam-id XXXXXXXXXXXXXXXXXXXXX --dest-acm-arn arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --no-dry-run
Updated 11111111111111 iam.example.com XXXXXXXXXXXXXXXXXXXXX -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Updated 22222222222222 iam2.example.com XXXXXXXXXXXXXXXXXXXXX -> arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

$ ./aws-cert-utils cloudfront list
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| DISTRIBUTION ID |           ALIASES            |                                   SSL CERTIFICATE                                   |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| 11111111111111  | iam.example.com              | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+
| 22222222222222  | iam2.example.com             | arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
+-----------------+------------------------------+-------------------------------------------------------------------------------------+

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CheckPrivateKeyBitLen 

func CheckPrivateKeyBitLen(bit int) error

func CheckTagValuePattern 

func CheckTagValuePattern(val string) error

func Choice 

func Choice(choices []string, msg string, pagesize int) string

func GetCertificateData 

func GetCertificateData(data, fpath string) ([]byte, error)

func NewAWSSession 

func NewAWSSession(accessKey, secretKey, arn, token, region, profile, config, creds string) (*session.Session, error)

func PrivateKeyBitLen 

func PrivateKeyBitLen(certBlock, keyBlock []byte) (int, error)

func SplitStatuses 

func SplitStatuses(s string) []string

Types

type ACM 

type ACM struct {
	// contains filtered or unexported fields
}

func NewACM 

func NewACM(sess *session.Session) *ACM

func (*ACM) AddTags 

func (a *ACM) AddTags(arn string, tags []Tag) error

func (*ACM) Delete 

func (a *ACM) Delete(arn string) (string, error)

func (*ACM) Import 

func (a *ACM) Import(cert, chain, pkey []byte) (string, string, error)

func (*ACM) List 

func (a *ACM) List(statuses string, maxItems int64, nextToken string) ([]ACMDescription, error)

func (*ACM) ListDeleteTargets added in v0.1.1 

func (a *ACM) ListDeleteTargets(statuses string, maxItems int64, nextToken string) ([]string, map[string]string, error)

func (*ACM) ReadableList 

func (a *ACM) ReadableList(descs []ACMDescription)

type ACMDescription 

type ACMDescription struct {
	// contains filtered or unexported fields
}

type ALB 

type ALB struct {
	// contains filtered or unexported fields
}

func NewALB 

func NewALB(sess *session.Session) *ALB

func (*ALB) BulkUpdate 

func (alb *ALB) BulkUpdate(srcCertArn, destCertArn string, dryRun bool) ([]string, error)

func (*ALB) List 

func (alb *ALB) List(certFilter string) ([]ALBDescription, error)

func (*ALB) ReadableList 

func (alb *ALB) ReadableList(descs []ALBDescription)

func (*ALB) Update 

func (alb *ALB) Update(name string, certArn string) error

type ALBCertificate 

type ALBCertificate struct {
	// contains filtered or unexported fields
}

type ALBDescription 

type ALBDescription struct {
	// contains filtered or unexported fields
}

type CFDistribution 

type CFDistribution struct {
	// contains filtered or unexported fields
}

type CertificateManager 

type CertificateManager struct {
	Cert  []byte
	Chain []byte
	Pkey  []byte
}

func NewCertificateManager 

func NewCertificateManager() *CertificateManager

func (*CertificateManager) CheckPrivateKeyBitLen 

func (cm *CertificateManager) CheckPrivateKeyBitLen() error

func (*CertificateManager) LoadCertificate 

func (cm *CertificateManager) LoadCertificate(cert, certPath string) error

func (*CertificateManager) LoadChain 

func (cm *CertificateManager) LoadChain(chain, chainPath string) error

func (*CertificateManager) LoadPrivateKey 

func (cm *CertificateManager) LoadPrivateKey(pkey, pkeyPath string) error

type CloudFront 

type CloudFront struct {
	// contains filtered or unexported fields
}

func NewCloudFront 

func NewCloudFront(sess *session.Session, marker string, maxItems int64) *CloudFront

func (*CloudFront) BulkUpdate 

func (cf *CloudFront) BulkUpdate(service, srcCert, destCert string, dryRun bool) ([]string, error)

func (*CloudFront) GetDistribution 

func (cf *CloudFront) GetDistribution(id string) (*cloudfront.GetDistributionOutput, error)

func (*CloudFront) List 

func (cf *CloudFront) List(certFilter, aliasesFilter string) ([]CFDistribution, error)

func (*CloudFront) ReadableList 

func (cf *CloudFront) ReadableList(dists []CFDistribution)

func (*CloudFront) Update 

func (cf *CloudFront) Update(id, service, cert string) (string, error)

type ELB 

type ELB struct {
	// contains filtered or unexported fields
}

func NewELB 

func NewELB(sess *session.Session) *ELB

func (*ELB) BulkUpdate 

func (e *ELB) BulkUpdate(srcCertArn, destCertArn string, dryRun bool) ([]string, error)

func (*ELB) List 

func (e *ELB) List(certFilter string) ([]ELBDescription, error)

func (*ELB) ReadableList 

func (e *ELB) ReadableList(descs []ELBDescription)

func (*ELB) Update 

func (e *ELB) Update(name string, port int64, certArn string) (string, error)

type ELBCertificate 

type ELBCertificate struct {
	// contains filtered or unexported fields
}

type ELBDescription 

type ELBDescription struct {
	// contains filtered or unexported fields
}

type IAM 

type IAM struct {
	// contains filtered or unexported fields
}

func NewIAM 

func NewIAM(sess *session.Session) *IAM

func (*IAM) Delete 

func (i *IAM) Delete(name string) (string, error)

func (*IAM) List 

func (i *IAM) List(marker string, maxItems int64, path string) ([]IAMDescription, error)

func (*IAM) ListMap added in v0.1.1 

func (i *IAM) ListMap(marker string, maxItems int64, path string) (map[string]IAMDescription, error)

func (*IAM) ListNames 

func (i *IAM) ListNames(marker string, maxItems int64, path string) ([]string, error)

func (*IAM) ReadableList 

func (i *IAM) ReadableList(descs []IAMDescription)

func (*IAM) Update 

func (i *IAM) Update(newPath, newName, name string) (string, error)

func (*IAM) Upload 

func (i *IAM) Upload(cert, chain, pkey []byte, path, name string) (string, error)

type IAMDescription 

type IAMDescription struct {
	// contains filtered or unexported fields
}

type Tag 

type Tag struct {
	Key   string
	Value string
}

Source Files

View all Source files

Directories

Path Synopsis
cli
aws-cert-utils

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.