pkiverifier

Documentation

Index

• func KeyFromClaims(claims *verifierClaims) *ecdsa.PublicKey
• type DatapathKey
• type PKITokenIssuer
  • func NewPKIIssuer(privateKey *ecdsa.PrivateKey) PKITokenIssuer
• type PKITokenVerifier
  • func NewPKIVerifier(publicKeys []*ecdsa.PublicKey, cacheValidity time.Duration) PKITokenVerifier

Functions

func KeyFromClaims

func KeyFromClaims(claims *verifierClaims) *ecdsa.PublicKey

KeyFromClaims creates the public key structure from the claims

Types

type DatapathKey

type DatapathKey struct {
	PublicKey *ecdsa.PublicKey
	Tags      []string
}

DatapathKey holds the data path key with the corresponding claims.

type PKITokenIssuer

type PKITokenIssuer interface {
	CreateTokenFromCertificate(*x509.Certificate, []string) ([]byte, error)
}

PKITokenIssuer is the interface of an object that can issue a PKI token.

func NewPKIIssuer

func NewPKIIssuer(privateKey *ecdsa.PrivateKey) PKITokenIssuer

NewPKIIssuer initializes a new signer structure

type PKITokenVerifier

type PKITokenVerifier interface {
	Verify([]byte) (*DatapathKey, error)
}

PKITokenVerifier is the interface of an object that can verify a PKI token.

func NewPKIVerifier

func NewPKIVerifier(publicKeys []*ecdsa.PublicKey, cacheValidity time.Duration) PKITokenVerifier

NewPKIVerifier returns a new PKIConfiguration.