Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var DefaultPrivateKeySize = 2048
DefaultPrivateKeySize is the key size to use when generating private keys It can be overridden by the KOPS_RSA_PRIVATE_KEY_SIZE env var, or by tests (as generating RSA keys can be a bottleneck for testing)
Functions ¶
func BuildPKISerial ¶
BuildPKISerial produces a serial number for certs that is vanishingly unlikely to collide The timestamp should be provided as an input (time.Now().UnixNano()), and then we combine that with a 32 bit random crypto-rand integer. We also know that a bigger value was created later (modulo clock skew)
func ComputeAWSKeyFingerprint ¶
ComputeAWSKeyFingerprint computes the AWS-specific fingerprint of the SSH public key
func ComputeOpenSSHKeyFingerprint ¶
ComputeOpenSSHKeyFingerprint computes the OpenSSH fingerprint of the SSH public key
Types ¶
type Certificate ¶
type Certificate struct {
Subject pkix.Name
IsCA bool
Certificate *x509.Certificate
PublicKey crypto.PublicKey
}
func ParsePEMCertificate ¶
func ParsePEMCertificate(pemData []byte) (*Certificate, error)
func SignNewCertificate ¶
func SignNewCertificate(privateKey *PrivateKey, template *x509.Certificate, signer *x509.Certificate, signerPrivateKey *PrivateKey) (*Certificate, error)
func (*Certificate) AsBytes ¶
func (c *Certificate) AsBytes() ([]byte, error)
func (*Certificate) AsString ¶
func (c *Certificate) AsString() (string, error)
func (*Certificate) MarshalJSON ¶
func (c *Certificate) MarshalJSON() ([]byte, error)
func (*Certificate) UnmarshalJSON ¶
func (c *Certificate) UnmarshalJSON(b []byte) error
type PrivateKey ¶
type PrivateKey struct {
Key crypto.PrivateKey
}
func GeneratePrivateKey ¶
func GeneratePrivateKey() (*PrivateKey, error)
func ParsePEMPrivateKey ¶
func ParsePEMPrivateKey(data []byte) (*PrivateKey, error)
func (*PrivateKey) AsBytes ¶
func (k *PrivateKey) AsBytes() ([]byte, error)
func (*PrivateKey) AsString ¶
func (k *PrivateKey) AsString() (string, error)
func (*PrivateKey) MarshalJSON ¶
func (k *PrivateKey) MarshalJSON() ([]byte, error)
func (*PrivateKey) UnmarshalJSON ¶
func (k *PrivateKey) UnmarshalJSON(b []byte) (err error)
Source Files
Click to show internal directories.
Click to hide internal directories.