ca

Oct 10, 2026

Changes in this version

+ type PolicyEvaluator interface

+ Evaluate func(context.Context, wire.Connection, *wire.PolicyFacts) (*wire.PolicyResponse, error)

Sep 27, 2026

Changes in this version

type Option

+ func WithFacts(directoryURL, inventoryURL string, identity oidc.Config, ...) Option

Sep 13, 2026

Changes in this version

+ type AuditMetadata struct

+ DirectoryRevision string

+ ID string

+ InventoryRevision string

+ PolicyID string

type CA

+ func (c *CA) Issue(ctx context.Context, token string, conn policy.Connection, ...) (*IssuedCertificate, error)

+ type IssuedCertificate struct

+ Audit AuditMetadata

+ Certificate sshcert.RawCertificate

Sep 11, 2026

Changes in this version

+ var ErrAccessDenied = errors.New("access denied")

+ var ErrAuthorizationPending = errors.New("authorization pending")

+ var ErrDependency = errors.New("CA dependency failed")

+ var ErrInvalidAuthentication = errors.New("invalid user authentication")

+ var ErrInvalidPublicKey = errors.New("invalid public key")

+ type Authorization struct

+ CertParams CertParams

+ DirectoryRevision string

+ ID string

+ InventoryRevision string

+ PolicyID string

type CertParams

+ NotAfter time.Time

type Option

+ func WithInventory(endpoint string, cfg tlsconfig.Config) Option

Apr 12, 2026

Changes in this version

+ type BootstrapAuth struct

+ ClientID string

+ ClientSecret string

+ Command string

+ Issuer string

+ Scopes []string

+ Type string

type CA

+ func (c *CA) FetchDiscovery(ctx context.Context) (*DiscoveryResponse, error)

+ type DiscoveryResponse struct

+ Auth *BootstrapAuth

+ CacheControl string

+ DefaultExpiration string

+ MatchPatterns []string

Feb 16, 2026

Changes in this version

type CA

+ func (c *CA) DiscoveryURL() string

Jan 3, 2026

Changes in this version

type CA

+ func (c *CA) BootstrapURL() string

type PolicyError

+ BootstrapURL string

type PolicyResponse

+ BootstrapURL string

Dec 26, 2025

Changes in this version

type Option

+ func WithLogger(logger *slog.Logger) Option

Dec 25, 2025

Changes in this version

type PolicyError

+ DiscoveryURL string

type PolicyResponse

+ DiscoveryURL string

Nov 26, 2025

Changes in this version

type Option

+ func WithTLSConfig(cfg tlsconfig.Config) Option

Nov 15, 2025

Changes in this version

+ type PolicyError struct

+ Message string

+ StatusCode int

+ func (e *PolicyError) Error() string

+ type PolicyResponse struct

+ CertParams CertParams

+ Policy policy.Policy

Jan 14, 2024

Changes in this version

+ func Verify(pubkey sshcert.RawPublicKey, token, signature string) error

type CA

+ func (c *CA) PolicyURL() string

+ func (c *CA) Sign(value string) (signature string, err error)

Mar 18, 2020

Changes in this version

+ type AuthToken struct

+ Provider string

+ Token string

+ type CA struct

+ func New(privateKey sshcert.RawPrivateKey, policyURL string, options ...Option) (*CA, error)

+ func (c *CA) PublicKey() sshcert.RawPublicKey

+ func (c *CA) RequestPolicy(ctx context.Context, token string) (*CertParams, error)

+ func (c *CA) SignPublicKey(rawPubKey sshcert.RawPublicKey, params *CertParams) (sshcert.RawCertificate, error)

+ type CertParams struct

+ Expiration time.Duration

+ Extensions map[string]string

+ Identity string

+ Names []string

+ type Option interface

+ func WithHTTPClient(httpClient *http.Client) Option