token

Documentation

Overview

package token validates a sigsum submit-token.

Index

• Constants
• func LookupDomain(ctx context.Context, lookupTXT func(context.Context, string) ([]string, error), ...) ([]string, error)
• func MakeToken(signer crypto.Signer, logKey *crypto.PublicKey) (crypto.Signature, error)
• func NormalizeDomainName(domain string) (string, error)
• func VerifyToken(key *crypto.PublicKey, logKey *crypto.PublicKey, token *crypto.Signature) error
• type DnsVerifier
  • func NewDnsVerifier(logKey *crypto.PublicKey) *DnsVerifier
  • func (dv *DnsVerifier) Verify(ctx context.Context, header *SubmitHeader) error
• type SubmitHeader
  • func (s *SubmitHeader) FromHeader(header string) error
  • func (s *SubmitHeader) ToHeader() string

Constants

const (
	Label = "_sigsum_v1"

	HeaderName = "Sigsum-Token"
)

Functions

func LookupDomain

func LookupDomain(ctx context.Context,
	lookupTXT func(context.Context, string) ([]string, error),
	domain string) ([]string, error)

Looks up the appropriate TXT records for a domain.

func MakeToken

func MakeToken(signer crypto.Signer, logKey *crypto.PublicKey) (crypto.Signature, error)

func NormalizeDomainName

func NormalizeDomainName(domain string) (string, error)

Normalizes a utf8 domain name.

func VerifyToken

func VerifyToken(key *crypto.PublicKey, logKey *crypto.PublicKey, token *crypto.Signature) error

Verify a token using a given key, with no DNS loookup.

Types

type DnsVerifier

type DnsVerifier struct {
	// contains filtered or unexported fields
}

DnsResolver implements the Verifier interface by querying DNS.

func NewDnsVerifier

func NewDnsVerifier(logKey *crypto.PublicKey) *DnsVerifier

func (*DnsVerifier) Verify

func (dv *DnsVerifier) Verify(ctx context.Context, header *SubmitHeader) error

type SubmitHeader

type SubmitHeader struct {
	Domain string
	Token  crypto.Signature
}

Represents the contents of the HTTP Sigsum-Submit: header-

func (*SubmitHeader) FromHeader

func (s *SubmitHeader) FromHeader(header string) error

func (*SubmitHeader) ToHeader

func (s *SubmitHeader) ToHeader() string