certs

Documentation

Index

• func FilterExpiredCerts(certs ...*x509.Certificate) []*x509.Certificate
• type Certificate
  • func NewCACertificate(subject pkix.Name, serialNumber int64, validity metav1.Duration, ...) (*Certificate, error)
  • func ParseCertificateBytes(certBytes, keyBytes []byte) (*Certificate, error)
  • func (c *Certificate) GetPEMBytes() ([]byte, []byte, error)
  • func (c *Certificate) NewClientCertificate(subject pkix.Name, serialNumber int64, validity metav1.Duration, ...) (*Certificate, error)
  • func (c *Certificate) NewServerCertificate(subject pkix.Name, hosts []string, serialNumber int64, ...) (*Certificate, error)

Functions

func FilterExpiredCerts

func FilterExpiredCerts(certs ...*x509.Certificate) []*x509.Certificate

FilterExpiredCerts checks are all certificates in the bundle valid, i.e. they have not expired. The function returns new bundle with only valid certificates or error if no valid certificate is found.

Types

type Certificate

type Certificate struct {
	Certificates []*x509.Certificate
	Key          crypto.PrivateKey
}

Certificate contains slice of certificates and a key.

func NewCACertificate

func NewCACertificate(subject pkix.Name, serialNumber int64, validity metav1.Duration, currentTime func() time.Time) (*Certificate, error)

NewCACertificate generates and signs new CA certificate and key.

func ParseCertificateBytes

func ParseCertificateBytes(certBytes, keyBytes []byte) (*Certificate, error)

ParseCertificateBytes converts PEM formatted certificate to the Certificate struct. Key is allowed to be empty, as there is cases when we're not storing it (e.g. CA bundles).

func (*Certificate) GetPEMBytes

func (c *Certificate) GetPEMBytes() ([]byte, []byte, error)

GetPEMBytes converts x509-formatted Certificate and Key to the PEM bytes. Key is allowed to be empty because we may not have a key (e.g. CA bundles).

func (*Certificate) NewClientCertificate

func (c *Certificate) NewClientCertificate(subject pkix.Name, serialNumber int64, validity metav1.Duration, currentTime func() time.Time) (*Certificate, error)

NewClientCertificate generates and signs new Client certificate and key from server certificate..

func (*Certificate) NewServerCertificate

func (c *Certificate) NewServerCertificate(subject pkix.Name, hosts []string, serialNumber int64, validity metav1.Duration, currentTime func() time.Time) (*Certificate, error)

NewServerCertificate generates and signs new Server certificate and key from CA bundle.