certauth

package

v0.8.0 Latest Latest Go to latest Published: May 30, 2025 License: MIT Imports: 10 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/micromdm/nanomdm

Links

Documentation ¶

Overview ¶

Package certauth

Index ¶

Variables
func HashCert(cert *x509.Certificate) string
type CertAuth
- func New(next service.CheckinAndCommandService, storage storage.CertAuthStore, ...) *CertAuth
type Option
- func WithAllowRetroactive() Option
- func WithLogger(logger log.Logger) Option

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrNoCertReuse = errors.New("cert re-use not permitted")
	ErrNoCertAssoc = errors.New("enrollment not associated with cert")
	ErrMissingCert = errors.New("missing MDM certificate")
)

Functions ¶

func HashCert ¶ added in v0.6.0

func HashCert(cert *x509.Certificate) string

HashCert returns the string representation

Types ¶

type CertAuth ¶

type CertAuth struct {
	// contains filtered or unexported fields
}

func New ¶

func New(next service.CheckinAndCommandService, storage storage.CertAuthStore, opts ...Option) *CertAuth

New creates a new certificate authorization middleware service. It will forward requests to next or return errors for failing authentication.

func (*CertAuth) Authenticate ¶

func (s *CertAuth) Authenticate(r *mdm.Request, m *mdm.Authenticate) error

func (*CertAuth) CheckOut ¶

func (s *CertAuth) CheckOut(r *mdm.Request, m *mdm.CheckOut) error

func (*CertAuth) CommandAndReportResults ¶

func (s *CertAuth) CommandAndReportResults(r *mdm.Request, results *mdm.CommandResults) (*mdm.Command, error)

func (*CertAuth) DeclarativeManagement ¶ added in v0.3.0

func (s *CertAuth) DeclarativeManagement(r *mdm.Request, m *mdm.DeclarativeManagement) ([]byte, error)

func (*CertAuth) GetBootstrapToken ¶

func (s *CertAuth) GetBootstrapToken(r *mdm.Request, m *mdm.GetBootstrapToken) (*mdm.BootstrapToken, error)

func (*CertAuth) GetToken ¶ added in v0.7.0

func (s *CertAuth) GetToken(r *mdm.Request, m *mdm.GetToken) (*mdm.GetTokenResponse, error)

func (*CertAuth) SetBootstrapToken ¶

func (s *CertAuth) SetBootstrapToken(r *mdm.Request, m *mdm.SetBootstrapToken) error

func (*CertAuth) TokenUpdate ¶

func (s *CertAuth) TokenUpdate(r *mdm.Request, m *mdm.TokenUpdate) error

func (*CertAuth) UserAuthenticate ¶

func (s *CertAuth) UserAuthenticate(r *mdm.Request, m *mdm.UserAuthenticate) ([]byte, error)

type Option ¶

type Option func(*CertAuth)

func WithAllowRetroactive ¶

func WithAllowRetroactive() Option

WithAllowRetroactive allows cert-auth associations to happen even when devices aren't enrolling if they don't already have an association. Ostensibly this allows "migrated" enrollments to "fix" their own cert-auth associations.

func WithLogger ¶

func WithLogger(logger log.Logger) Option

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL