fulcio

Documentation

Index

• Constants
• func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, ...) (*api.CertificateResponse, error)
• func GetRoots() *x509.CertPool
• func NewClient(fulcioURL string) (api.Client, error)
• type Signer
  • func NewSigner(ctx context.Context, idToken, oidcIssuer, oidcClientID string, ...) (*Signer, error)
  • func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)

Constants

const (
	FlowNormal = "normal"
	FlowDevice = "device"
	FlowToken  = "token"
)

Functions

func GetCert

func GetCert(ctx context.Context, priv *ecdsa.PrivateKey, idToken, flow, oidcIssuer, oidcClientID string, fClient api.Client) (*api.CertificateResponse, error)

GetCert returns the PEM-encoded signature of the OIDC identity returned as part of an interactive oauth2 flow plus the PEM-encoded cert chain.

func GetRoots

func GetRoots() *x509.CertPool

func NewClient

func NewClient(fulcioURL string) (api.Client, error)

Types

type Signer

type Signer struct {
	Cert  []byte
	Chain []byte
	SCT   []byte

	*signature.ECDSASignerVerifier
	// contains filtered or unexported fields
}

func NewSigner

func NewSigner(ctx context.Context, idToken, oidcIssuer, oidcClientID string, fClient api.Client) (*Signer, error)

func (*Signer) PublicKey

func (f *Signer) PublicKey(opts ...signature.PublicKeyOption) (crypto.PublicKey, error)