clientapi

func (*ClientAPI) GetCertQuote ¶

func (a *ClientAPI) GetCertQuote() (cert string, certQuote []byte, err error)

GetCertQuote gets the Coordinators certificate and corresponding quote (containing the cert).

Returns the remote attestation quote of its own certificate alongside this certificate, which allows to verify the Coordinator's integrity and authentication for use of the ClientAPI.

func (*ClientAPI) GetManifestSignature ¶

func (a *ClientAPI) GetManifestSignature() (manifestSignatureRootECDSA, manifestSignature, manifest []byte)

GetManifestSignature returns the hash of the manifest.

Returns ECDSA signature, SHA256 hash and byte encoded representation of the active manifest.

func (*ClientAPI) GetSecrets ¶

func (a *ClientAPI) GetSecrets(requestedSecrets []string, client *user.User) (map[string]manifest.Secret, error)

GetSecrets allows a user to retrieve secrets from the Coordinator.

func (*ClientAPI) GetStatus ¶

func (a *ClientAPI) GetStatus() (state.State, string, error)

GetStatus returns status information about the state of the Coordinator.

func (*ClientAPI) GetUpdateLog ¶

func (a *ClientAPI) GetUpdateLog() (string, error)

GetUpdateLog returns the update history of the Coordinator.

func (*ClientAPI) Recover ¶

func (a *ClientAPI) Recover(encryptionKey []byte) (keysLeft int, err error)

Recover sets an encryption key (ideally decrypted from the recovery data) and tries to unseal and load a saved state of the Coordinator.

func (*ClientAPI) SetManifest ¶

func (a *ClientAPI) SetManifest(rawManifest []byte) (recoverySecretMap map[string][]byte, err error)

SetManifest sets the manifest of the Coordinator.

rawManifest is the manifest of type Manifest in JSON format. recoverySecretMap is a map of recovery secrets that can be used to recover the Coordinator.

func (*ClientAPI) UpdateManifest ¶

func (a *ClientAPI) UpdateManifest(rawUpdateManifest []byte, updater *user.User) (err error)

UpdateManifest allows to update certain package parameters of the original manifest, supplied via a JSON manifest.

func (*ClientAPI) VerifyUser ¶

func (a *ClientAPI) VerifyUser(clientCerts []*x509.Certificate) (*user.User, error)

VerifyUser checks if a given client certificate matches the admin certificates specified in the manifest.

func (*ClientAPI) WriteSecrets ¶

func (a *ClientAPI) WriteSecrets(rawSecretManifest []byte, updater *user.User) (err error)

WriteSecrets allows a user to set certain user-defined secrets for the Coordinator.