ca

Documentation

Overview

Copyright IBM Corp. All Rights Reserved.

SPDX-License-Identifier: Apache-2.0

Index

• func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)
• func LoadCertificateGMSM2(certPath string) (*sm2.Certificate, error)
• type CA
  • func NewCA(...) (*CA, error)
  • func (ca *CA) SignCertificate(baseDir, name string, ous, sans []string, pub *sm2.PublicKey, ku x509.KeyUsage, ...) (*sm2.Certificate, error)

Functions

func LoadCertificateECDSA

func LoadCertificateECDSA(certPath string) (*x509.Certificate, error)

LoadCertificateECDSA load a ecdsa cert from a file in cert path

func LoadCertificateGMSM2

func LoadCertificateGMSM2(certPath string) (*sm2.Certificate, error)

LoadCertificateGMSM2 load a ecdsa cert from a file in cert path

Types

type CA

type CA struct {
	Name               string
	Country            string
	Province           string
	Locality           string
	OrganizationalUnit string
	StreetAddress      string
	PostalCode         string
	//SignKey  *ecdsa.PrivateKey
	Signer   crypto.Signer
	SignCert *x509.Certificate
	// Add GMSM support
	SignSm2Cert *sm2.Certificate
	Sm2Key      bccsp.Key
}

func NewCA

func NewCA(baseDir, org, name, country, province, locality, orgUnit, streetAddress, postalCode string) (*CA, error)

NewCA creates an instance of CA and saves the signing key pair in baseDir/name

func (*CA) SignCertificate

func (ca *CA) SignCertificate(baseDir, name string, ous, sans []string, pub *sm2.PublicKey,
	ku x509.KeyUsage, eku []x509.ExtKeyUsage) (*sm2.Certificate, error)

SignCertificate creates a signed certificate based on a built-in template and saves it in baseDir/name