Documentation
¶
Index ¶
- Constants
- func CheckDNSPropagation(nameservers []string, fqdn string, values ...string) (bool, error)
- func CreateWrapPreCheckOption(nameservers []string) dns01.ChallengeOption
- func ExtractCommonNameAnDNSNames(csr []byte) (cn *string, san []string, err error)
- func FollowCNAMEs(fqdn string, nameservers []string, fqdnChain ...string) (string, error)
- func NoPropagationCheckOption() dns01.ChallengeOption
- func PreparePrecheckNameservers(nameservers []string) []string
- type Cluster
- type IssuerInfo
- type IssuerKeyItf
Constants ¶
const ( // AnnotDNSClass is the annotation for the dns class AnnotDNSClass = "dns.gardener.cloud/class" // AnnotACMEDNSChallenge is the annotation for marking DNSEntries for DNS challenges AnnotACMEDNSChallenge = "cert.gardener.cloud/acme-dns-challenge" )
const ( // IssuerTypeACME is the issuer type ACME IssuerTypeACME = "acme" // IssuerTypeCA is the issuer type CA IssuerTypeCA = "ca" // IssuerTypeSelfSigned is the issuer type selfsigned IssuerTypeSelfSigned = "selfSigned" )
Variables ¶
This section is empty.
Functions ¶
func CheckDNSPropagation ¶
CheckDNSPropagation checks if the expected TXT record has been propagated to all authoritative nameservers.
func CreateWrapPreCheckOption ¶
func CreateWrapPreCheckOption(nameservers []string) dns01.ChallengeOption
CreateWrapPreCheckOption creates lego DNS ChallengeOption for custom Precheck function, checking the DNS propagation of the DNS challenge TXT record.
func ExtractCommonNameAnDNSNames ¶
ExtractCommonNameAnDNSNames extracts values from a CSR (Certificate Signing Request).
func FollowCNAMEs ¶
FollowCNAMEs follows the CNAME records and returns the last non-CNAME fully qualified domain name that it finds. Returns an error when a loop is found in the CNAME chain. The argument fqdnChain is used by the function itself to keep track of which fqdns it already encountered and detect loops. Method copied from https://github.com/cert-manager/cert-manager/pkg/issuer/acme/dns/util/wait.go
func NoPropagationCheckOption ¶
func NoPropagationCheckOption() dns01.ChallengeOption
NoPropagationCheckOption creates lego DNS ChallengeOption for custom Precheck function, performing no DNS propagation check of the DNS challenge TXT record at all.
func PreparePrecheckNameservers ¶
PreparePrecheckNameservers collects the nameservers for checking DNS propagation. If no nameservers are provided, it tries to read them from `/etc/resolv.conf`, and last resort is to use Google public DNS servers (8.8.8.8 and 8.8.4.4)
Types ¶
type IssuerInfo ¶
type IssuerInfo struct {
// contains filtered or unexported fields
}
IssuerInfo provides name and type of an issuer
func NewACMEIssuerInfo ¶
func NewACMEIssuerInfo(key IssuerKeyItf) IssuerInfo
NewACMEIssuerInfo creates info for an ACME issuer
func NewCAIssuerInfo ¶
func NewCAIssuerInfo(key IssuerKeyItf) IssuerInfo
NewCAIssuerInfo creates info for an CA issuer
func NewSelfSignedIssuerInfo ¶
func NewSelfSignedIssuerInfo(key IssuerKeyItf) IssuerInfo
NewSelfSignedIssuerInfo creates info for a selfSigned issuer.
func (*IssuerInfo) IssuerType ¶
func (i *IssuerInfo) IssuerType() string
IssuerType returns the issuer type
Source Files
Directories