Documentation
¶
Overview ¶
Package pki provides certificate authority and PKI operations
Index ¶
- Constants
- func NewNativeCertificateIssuer(opts NativeCertificateIssuerOptions) (types.CertificateIssuer, error)
- type CA
- type CRL
- type NativeCertificateIssuer
- func (i *NativeCertificateIssuer) GetCACertificate(ctx context.Context) (string, error)
- func (i *NativeCertificateIssuer) GetCRL(ctx context.Context) (string, error)
- func (i *NativeCertificateIssuer) NewCertificate(ctx context.Context, req *types.CertificateRequest) (string, string, error)
- func (i *NativeCertificateIssuer) RawCertificate(ctx context.Context, sans string, ttl int) (string, string, error)
- type NativeCertificateIssuerOptions
Constants ¶
View Source
const ( // RSAKeySize is the default key size for RSA keys RSAKeySize = 2048 // DefaultCATTL is the default TTL for CA certificates (10 years) DefaultCATTL = 10 * 365 * 24 * time.Hour )
Variables ¶
This section is empty.
Functions ¶
func NewNativeCertificateIssuer ¶
func NewNativeCertificateIssuer(opts NativeCertificateIssuerOptions) (types.CertificateIssuer, error)
NewNativeCertificateIssuer creates a new native Go certificate issuer.
Types ¶
type CA ¶
type CA struct {
// contains filtered or unexported fields
}
CA represents a Certificate Authority
func LoadCAFromPEM ¶
LoadCAFromPEM loads a Certificate Authority from PEM-encoded bytes
func (*CA) GetCACertificatePEM ¶
GetCACertificatePEM returns the CA certificate in PEM format
type CRL ¶
type CRL struct {
// contains filtered or unexported fields
}
CRL represents a Certificate Revocation List
type NativeCertificateIssuer ¶
type NativeCertificateIssuer struct {
// contains filtered or unexported fields
}
NativeCertificateIssuer implements types.CertificateIssuer using native Go crypto
func (*NativeCertificateIssuer) GetCACertificate ¶
func (i *NativeCertificateIssuer) GetCACertificate(ctx context.Context) (string, error)
GetCACertificate implements types.CertificateIssuer
func (*NativeCertificateIssuer) GetCRL ¶
func (i *NativeCertificateIssuer) GetCRL(ctx context.Context) (string, error)
GetCRL implements types.CertificateIssuer
func (*NativeCertificateIssuer) NewCertificate ¶
func (i *NativeCertificateIssuer) NewCertificate(ctx context.Context, req *types.CertificateRequest) (string, string, error)
NewCertificate implements types.CertificateIssuer
func (*NativeCertificateIssuer) RawCertificate ¶
func (i *NativeCertificateIssuer) RawCertificate(ctx context.Context, sans string, ttl int) (string, string, error)
RawCertificate implements types.CertificateIssuer
type NativeCertificateIssuerOptions ¶
type NativeCertificateIssuerOptions struct {
BaseDNS string
CertificateTTL string
CACommonName string
CAOrganization string
CACertFile string
CAKeyFile string
AltCACertFile string
AltCAKeyFile string
}
NativeCertificateIssuerOptions defines options for the native issuer
Source Files
Click to show internal directories.
Click to hide internal directories.