ca

Documentation

Index

• type CA
  • func NewCA() (*CA, error)
  • func (ca *CA) IssueEndEntityCertificate(dnsName string) (*CertificateAndPrivateKey, error)
  • func (ca *CA) TrustAnchorPEM() string
• type CertificateAndPrivateKey
• type CertificateController
  • func NewCertificateController(controllerNamespace string, k8sAPI *k8s.API) (*CertificateController, error)
  • func (c *CertificateController) Run(readyCh <-chan struct{}, stopCh <-chan struct{})

Types

type CA

type CA struct {
	// contains filtered or unexported fields
}

Issuing certificates concurrently is not supported.

func NewCA

func NewCA() (*CA, error)

NewCA is the only way to create a CA.

func (*CA) IssueEndEntityCertificate

func (ca *CA) IssueEndEntityCertificate(dnsName string) (*CertificateAndPrivateKey, error)

IssueEndEntityCertificate creates a new certificate that is valid for the given DNS name, generating a new keypair for it.

func (*CA) TrustAnchorPEM

func (ca *CA) TrustAnchorPEM() string

TrustAnchorDER returns the PEM-encoded X.509 certificate of the trust anchor (root CA).

type CertificateAndPrivateKey

type CertificateAndPrivateKey struct {
	// The ASN.1 DER-encoded (binary, not PEM) certificate.
	Certificate []byte

	// The PKCS#8 DER-encoded (binary, not PEM) private key.
	PrivateKey []byte
}

type CertificateController

type CertificateController struct {
	// contains filtered or unexported fields
}

func NewCertificateController

func NewCertificateController(controllerNamespace string, k8sAPI *k8s.API) (*CertificateController, error)

func (*CertificateController) Run

func (c *CertificateController) Run(readyCh <-chan struct{}, stopCh <-chan struct{})