pki

Documentation

Index

• Constants
• func NewCertPoolFromCA(ca *x509.Certificate) *x509.CertPool
• type CAConfig
• type CertificateKeyPair
  • func GenerateCA(config *CAConfig) (*CertificateKeyPair, error)
  • func (c *CertificateKeyPair) CreateCertificate(hostName string, expiry time.Duration) (*CertificateKeyPair, error)
• type PEMBlockType

Constants

const DefaultExpiry = 365 * 24 * time.Hour

Functions

func NewCertPoolFromCA

func NewCertPoolFromCA(ca *x509.Certificate) *x509.CertPool

Types

type CAConfig

type CAConfig struct {
	CommonName          string
	PermittedDNSDomains []string
	Expiry              time.Duration
}

type CertificateKeyPair

type CertificateKeyPair struct {
	PrivateKeyPem  []byte
	CertificatePem []byte
	Certificate    *x509.Certificate
	PrivateKey     ed25519.PrivateKey
}

func GenerateCA

func GenerateCA(config *CAConfig) (*CertificateKeyPair, error)

func (*CertificateKeyPair) CreateCertificate

func (c *CertificateKeyPair) CreateCertificate(hostName string, expiry time.Duration) (*CertificateKeyPair, error)

type PEMBlockType

type PEMBlockType string

const (
	CertificateBlock PEMBlockType = "CERTIFICATE"
	PrivateKeyBlock  PEMBlockType = "PRIVATE KEY"
)