token

Documentation

Overview

package token validates a sigsum submit-token.

Index

• Constants
• func MakeToken(signer crypto.Signer, logKey *crypto.PublicKey) (crypto.Signature, error)
• func NormalizeDomainName(domain string) (string, error)
• func VerifyToken(key *crypto.PublicKey, logKey *crypto.PublicKey, token string) error
• type DnsVerifier
  • func (dv *DnsVerifier) Verify(ctx context.Context, name, signatureHex string) error
• type Verifier
  • func NewDnsVerifier(logKey *crypto.PublicKey) Verifier

Constants

const (
	Label      = "_sigsum_v0"
	HeaderName = "Sigsum-Token"
)

Functions

func MakeToken

func MakeToken(signer crypto.Signer, logKey *crypto.PublicKey) (crypto.Signature, error)

TODO: Return hex string, for consistency with VerifyToken ?

func NormalizeDomainName

func NormalizeDomainName(domain string) (string, error)

Normalizes a utf8 domain name.

func VerifyToken

func VerifyToken(key *crypto.PublicKey, logKey *crypto.PublicKey, token string) error

Verify a token using a given key, with no DNS loookup.

Types

type DnsVerifier

type DnsVerifier struct {
	// contains filtered or unexported fields
}

DnsResolver implements the Verifier interface by querying DNS.

func (*DnsVerifier) Verify

func (dv *DnsVerifier) Verify(ctx context.Context, name, signatureHex string) error

type Verifier

type Verifier interface {
	Verify(ctx context.Context, name, signature string) error
}

Verifier can verify that a domain name is aware of a public key. Name and signature corresponds to the value of the submit-token: header, so signature is still hex-encoded.

func NewDnsVerifier

func NewDnsVerifier(logKey *crypto.PublicKey) Verifier