Affected by GO-2023-2378 and 1 other vulnerabilities

GO-2023-2378: Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

GO-2025-3450: MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

util

package

v0.1.0 Latest Latest Go to latest Published: Nov 19, 2020 License: MPL-2.0 Imports: 16 Imported by: 9

Details

This section is empty.

This section is empty.

func DeriveKey(secret, salt []byte) ([]byte, error)

DeriveKey derives a key from a secret.

func GenerateCSR(dnsNames []string, privk *ecdsa.PrivateKey) (*x509.CertificateRequest, error)

GenerateCSR generates a new CSR for the given DNSNames and private key

func GenerateCert(dnsNames []string, ipAddrs []net.IP, isCA bool) (*x509.Certificate, *ecdsa.PrivateKey, error)

GenerateCert generates a new self-signed certificate associated key-pair

func GenerateCertificateSerialNumber() (*big.Int, error)

GenerateCertificateSerialNumber generates a random serial number for an X.509 certificate.

func LoadGRPCTLSCredentials(cert *x509.Certificate, privk *ecdsa.PrivateKey, insecureSkipVerify bool) (credentials.TransportCredentials, error)

LoadGRPCTLSCredentials returns a TLS configuration based on cert and privk

func MustGenerateTestMarbleCredentials() (cert *x509.Certificate, csrRaw []byte, privk *ecdsa.PrivateKey)

MustGenerateTestMarbleCredentials returns dummy Marble TLS credentials for testing

func MustGetLocalListenerAndAddr() (net.Listener, string)

MustGetLocalListenerAndAddr returns a TCP listener on a system-chosen port on localhost and its address.

func MustGetenv(name string) string

MustGetenv returns the environment variable `name` if it exists or panics otherwise

func TLSCertFromDER(certDER []byte, privk interface{}) *tls.Certificate

TLSCertFromDER converts a DER certificate to a TLS certificate.

This section is empty.