nodetag

Documentation

Index

• Variables
• func Sign(ctx context.Context, tagSet *pb.NodeTagSet, signer signing.Signer) (*pb.SignedNodeTagSet, error)
• func Verify(ctx context.Context, tags *pb.SignedNodeTagSet, signee signing.Signee) (*pb.NodeTagSet, error)
• type Authority
  • func (a Authority) Verify(ctx context.Context, tags *pb.SignedNodeTagSet) (*pb.NodeTagSet, error)

Variables

var (
	// SignatureErr means that the signature wash wrong.
	SignatureErr = errs.Class("invalid signature")

	// SerializationErr is returned when the tags are signed, but the payload couldn't be unmarshalled.
	SerializationErr = errs.Class("invalid tag serialization")

	// WrongSignee is returned when the tags are signed, but the signee field has a different NodeID.
	WrongSignee = errs.Class("node id mismatch")
)

var (
	// UnknownSignee is returned when the public key is not available for NodeID to check the signature.
	UnknownSignee = errs.Class("node tag signee is unknown")
)

Functions

func Sign

func Sign(ctx context.Context, tagSet *pb.NodeTagSet, signer signing.Signer) (*pb.SignedNodeTagSet, error)

Sign create a signed tag set from a raw one.

func Verify

func Verify(ctx context.Context, tags *pb.SignedNodeTagSet, signee signing.Signee) (*pb.NodeTagSet, error)

Verify checks the signature of a signed tag set.

Types

type Authority

type Authority []signing.Signee

Authority contains all possible signee.

func (Authority) Verify

func (a Authority) Verify(ctx context.Context, tags *pb.SignedNodeTagSet) (*pb.NodeTagSet, error)

Verify checks if any of the storage signee can validate the signature.