accesscontrol

Documentation

Index

• type Authenticator
  • func NewAuthenticator(srv pb.ChaincodeSupportServer, ca CA) Authenticator
• type CA
  • func NewCA() (CA, error)
• type CertAndPrivKeyPair
• type CertKeyPair
• type ChaincodeStream
• type KeyGenFunc

Types

type Authenticator

type Authenticator interface {
	// DisableAccessCheck disables the access control
	// enforcement of the Authenticator
	DisableAccessCheck()

	// Generate returns a pair of certificate and private key,
	// and associates the hash of the certificate with the given
	// chaincode name
	Generate(ccName string) (*CertAndPrivKeyPair, error)

	// ChaincodeSupportServer - The Authenticator is registered
	// as a chaincode service
	pb.ChaincodeSupportServer
}

Authenticator wraps a chaincode service and authenticates chaincode shims (containers)

func NewAuthenticator

func NewAuthenticator(srv pb.ChaincodeSupportServer, ca CA) Authenticator

NewAuthenticator returns a new authenticator that would wrap the given chaincode service

type CA

type CA interface {
	// CertBytes returns the certificate of the CA in PEM encoding
	CertBytes() []byte

	// NewServerCertKeyPair returns a CertKeyPair and nil,
	// with a given custom SAN.
	// The certificate is signed by the CA.
	// Returns nil, error in case of failure
	NewServerCertKeyPair(host string) (*CertKeyPair, error)
	// contains filtered or unexported methods
}

CA defines a certificate authority that can generate certificates signed by it

func NewCA

func NewCA() (CA, error)

type CertAndPrivKeyPair

type CertAndPrivKeyPair struct {
	// Cert - an x509 certificate encoded in base64
	Cert string
	// Key  - a private key of the corresponding certificate
	Key string
}

CertAndPrivKeyPair contains a certificate and its corresponding private key in base64 format

type CertKeyPair

type CertKeyPair struct {
	// Cert is the certificate, PEM encoded
	Cert []byte
	// Key is the key corresponding to the certificate, PEM encoded
	Key []byte
}

CertKeyPair denotes a TLS certificate and corresponding key, both PEM encoded

type ChaincodeStream

type ChaincodeStream interface {
	// Send sends a chaincode message
	Send(*pb.ChaincodeMessage) error
	// Recv receives a chaincode message
	Recv() (*pb.ChaincodeMessage, error)
}

ChaincodeStream defines a gRPC stream for sending and receiving chaincode messages

type KeyGenFunc

type KeyGenFunc func() (*certKeyPair, error)