signer

Documentation

Index

• Constants
• func NewAuthHandlerFromSigner(signer signer.Signer) (http.Handler, error)
• func NewHandlerFromSigner(signer signer.Signer) (h *api.HTTPHandler, err error)
• type AuthHandler
  • func (h *AuthHandler) Handle(w http.ResponseWriter, r *http.Request) error
  • func (h *AuthHandler) SetBundler(caBundleFile, intBundleFile string) (err error)
• type Handler
  • func (h *Handler) Handle(w http.ResponseWriter, r *http.Request) error
  • func (h *Handler) SetBundler(caBundleFile, intBundleFile string) (err error)

Constants

const NoBundlerMessage = `This request requires a bundler, but one is not initialized for the API server.`

NoBundlerMessage is used to alert the user that the server does not have a bundler initialized.

Functions

func NewAuthHandlerFromSigner

func NewAuthHandlerFromSigner(signer signer.Signer) (http.Handler, error)

NewAuthHandlerFromSigner creates a new AuthHandler from the signer that is passed in. issued the certificate API Handler

func NewHandlerFromSigner

func NewHandlerFromSigner(signer signer.Signer) (h *api.HTTPHandler, err error)

NewHandlerFromSigner generates a new Handler directly from an existing signer.

Types

type AuthHandler

type AuthHandler struct {
	// contains filtered or unexported fields
}

An AuthHandler verifies and signs incoming signature requests.

func (*AuthHandler) Handle

func (h *AuthHandler) Handle(w http.ResponseWriter, r *http.Request) error

Handle receives the incoming request, validates it, and processes it. Process signed certificate requests for authentication

func (*AuthHandler) SetBundler

func (h *AuthHandler) SetBundler(caBundleFile, intBundleFile string) (err error)

SetBundler allows injecting an optional Bundler into the Handler.

type Handler

type Handler struct {
	// contains filtered or unexported fields
}

A Handler accepts requests with a hostname and certficate parameter (which should be PEM-encoded) and returns a new signed certificate. It includes upstream servers indexed by their profile name.

func (*Handler) Handle

func (h *Handler) Handle(w http.ResponseWriter, r *http.Request) error

Handle responds to requests for the CA to sign the certificate request present in the "certificate_request" parameter for the host named in the "hostname" parameter. The certificate should be PEM-encoded. If provided, subject information from the "subject" parameter will be used in place of the subject information from the CSR. The Handler will not be called, we usually use the following AuthHandler

func (*Handler) SetBundler

func (h *Handler) SetBundler(caBundleFile, intBundleFile string) (err error)

SetBundler allows injecting an optional Bundler into the Handler.