ca

Documentation

Index

• Constants
• Variables
• type CertStatus
• type CertStore
• type ID
• type KeyID
• type KeyPair
• type Responder
• type ResponderDB

Constants

const (
	SerialOctets = 20
	SerialBits   = 8 * SerialOctets
)

Variables

var (
	ErrCertNotFound = errors.New("certificate not found")
	ErrCertExpired  = errors.New("certificate is expired")
)

Types

type CertStatus

type CertStatus uint8

const (
	Invalid CertStatus = iota
	Valid
	Revoked
	Expired
)

type CertStore

type CertStore interface {
	Get(context.Context, KeyID) (*x509.Certificate, CertStatus, error)
	Del(context.Context, KeyID) error
	Put(context.Context, *x509.Certificate) error
	Revoke(context.Context, KeyID) error
}

type ID

type ID interface{ Bytes() []byte }

type KeyID

type KeyID interface {
	Serial() ID
	KeyHash() []byte
}

type KeyPair

type KeyPair struct {
	Key  crypto.Signer
	Cert *x509.Certificate
}

type Responder

type Responder struct {
	Signer KeyPair
	CA     *x509.Certificate
}

type ResponderDB

type ResponderDB interface {
	// Get a responder by key hash.
	Get(context.Context, []byte) (*Responder, error)
	// Insert a new responder
	Put(context.Context, *Responder) error
	// Delete a responder
	Del(context.Context, []byte) error
	// Find the responder keys given a leaf certificate
	Find(context.Context, *x509.Certificate) (*Responder, error)
}