selfsigned

Documentation

Index

• Constants
• func DumpCASecret(c kubernetes.Interface, namespace, name string, caCertData, caKeyData []byte) (bool, error)
• func DumpSecret(c client.Client, namespace, name string, caData, certData, keyData []byte) error
• type CertPair
  • func (k CertPair) AsBytes() (cert []byte, key []byte, err error)
  • func (k CertPair) CertBytes() []byte
• type CertRotation
• type SelfSigner
  • func NewGeneratedSelfSigner() (SelfSigner, error)
  • func NewSelfSignerFromSecretOrGenerate(c kubernetes.Interface, secretNamespace, secretName string) (SelfSigner, error)
  • func NewSelfSignerWithCA(caCert *x509.Certificate, caKey *rsa.PrivateKey, nextSerial *big.Int) (SelfSigner, error)
  • func NewSelfSignerWithCAData(caCertData, caKeyData []byte) (SelfSigner, error)

Constants

const (
	TLSCACert = "ca.crt"
	TLSCAKey  = "ca.key"
)

Functions

func DumpCASecret

func DumpCASecret(c kubernetes.Interface, namespace, name string, caCertData, caKeyData []byte) (bool, error)

func DumpSecret

func DumpSecret(c client.Client, namespace, name string, caData, certData, keyData []byte) error

Types

type CertPair

type CertPair struct {
	Key  crypto.Signer
	Cert *x509.Certificate
}

func (CertPair) AsBytes

func (k CertPair) AsBytes() (cert []byte, key []byte, err error)

func (CertPair) CertBytes

func (k CertPair) CertBytes() []byte

type CertRotation

type CertRotation interface {
	EnsureTargetCertKeyPair(signingCertKeyPair *openshiftcrypto.CA, caBundleCerts []*x509.Certificate, fns ...openshiftcrypto.CertificateExtensionFunc) error
}

type SelfSigner

type SelfSigner interface {
	Sign(cfg cert.Config, expiry time.Duration) (CertPair, error)
	CAData() []byte
	GetSigner() crypto.Signer
	CA() *openshiftcrypto.CA
}

func NewGeneratedSelfSigner

func NewGeneratedSelfSigner() (SelfSigner, error)

func NewSelfSignerFromSecretOrGenerate

func NewSelfSignerFromSecretOrGenerate(c kubernetes.Interface, secretNamespace, secretName string) (SelfSigner, error)

func NewSelfSignerWithCA

func NewSelfSignerWithCA(caCert *x509.Certificate, caKey *rsa.PrivateKey, nextSerial *big.Int) (SelfSigner, error)

func NewSelfSignerWithCAData

func NewSelfSignerWithCAData(caCertData, caKeyData []byte) (SelfSigner, error)