remote

Documentation

Index

• type Signer
  • func NewSigner(policy *config.Signing) (*Signer, error)
  • func (s *Signer) GetDBAccessor() certdb.Accessor
  • func (s *Signer) Info(req info.Req) (resp *info.Resp, err error)
  • func (s *Signer) Policy() *config.Signing
  • func (s *Signer) SetDBAccessor(dba certdb.Accessor)
  • func (s *Signer) SetPolicy(policy *config.Signing)
  • func (s *Signer) SetReqModifier(mod func(*http.Request, []byte))
  • func (s *Signer) SigAlgo() x509.SignatureAlgorithm
  • func (s *Signer) Sign(req signer.SignRequest) (cert []byte, err error)

Types

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

A Signer represents a CFSSL instance running as signing server. fulfills the signer.Signer interface

func NewSigner

func NewSigner(policy *config.Signing) (*Signer, error)

NewSigner creates a new remote Signer directly from a signing policy.

func (*Signer) GetDBAccessor

func (s *Signer) GetDBAccessor() certdb.Accessor

GetDBAccessor returns the signers' cert db accessor, currently noop.

func (*Signer) Info

func (s *Signer) Info(req info.Req) (resp *info.Resp, err error)

Info sends an info request to the remote CFSSL server, receiving an Resp struct or an error in response.

func (*Signer) Policy

func (s *Signer) Policy() *config.Signing

Policy returns the signer's policy.

func (*Signer) SetDBAccessor

func (s *Signer) SetDBAccessor(dba certdb.Accessor)

SetDBAccessor sets the signers' cert db accessor, currently noop.

func (*Signer) SetPolicy

func (s *Signer) SetPolicy(policy *config.Signing)

SetPolicy sets the signer's signature policy.

func (*Signer) SetReqModifier

func (s *Signer) SetReqModifier(mod func(*http.Request, []byte))

SetReqModifier sets the function to call to modify the HTTP request prior to sending it

func (*Signer) SigAlgo

func (s *Signer) SigAlgo() x509.SignatureAlgorithm

SigAlgo returns the RSA signer's signature algorithm.

func (*Signer) Sign

func (s *Signer) Sign(req signer.SignRequest) (cert []byte, err error)

Sign sends a signature request to the remote CFSSL server, receiving a signed certificate or an error in response. The hostname, csr, and profileName are used as with a local signing operation, and the label is used to select a signing root in a multi-root CA.