cert

package
v0.2.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 14, 2023 License: Apache-2.0 Imports: 9 Imported by: 10

README

gNSI.certz

gNSI certz Service Protobuf Definition

Contributors: hines@google.com, morrowc@google.com, tmadejski@google.com Last Updated: 2022-11-10

Background

The certz service definition provides the API to be used for rotating and testing PKI primitives used on network systems. The Rotate() is bidirectional streaming RPC which permit mutating Certificates, Root Certificate Bundles and Certificate Revocation Lists. For Rotate() stream it is possible to mutate one or more of the elements, and to send a Finalize message once the in-flight change has been verified to be operational. Failure to send the Finalize message will result in the candidate element being discarded and the original element being used instead.

Motivation

Management of the PKI elements for a network system should have a clear and direct method for installation and update.

Certz.Rotate()

Certz.Rotate() will permit rotation, and verification of function, of any of the PKI elements. The normal use-case would be to:

  • send an CertificateBundle to a network system as a RotateCertificateRequest.
  • verify that the services which will use the new certificate bundle continue to operate normally.
  • send a FinalizeRequest to finish the rotation process.
SSL profiles

SSL profiles logically group a certificate (private and public keys), Certificate Authority chain of certificates (a.k.a. a CA trust bundle) and a set of Certificate Revocation Lists into a set that then can be assigned as a whole to a gRPC server.

There is at least one profile present on a target - the one that is used by the gNxI server. Its ID is gNxI but when the ssl_profile_id field in the RotateCertificateRequest message is not set (or set to an empty string) it also refers this SSL profile.

Profiles existing on a target can be discovered using the Certz.GetProfileList() RPC.

A SSL profile can be added using the Certz.AddProfile() RPC.

When no longer a profile is needed it can be removed from the target via Certz.DeleteProfile() RPC. Note that the gNxI SSL profile cannot be removed.

User Experiences
Create a SSL profile

Call Certz.AddProfile RPC with the ssl_profile_id field specifying the ID of the new SSL profile.

Delete a SSL profile

Call Certz.DeleteProfile RPC with the ssl_profile_id field specifying the ID of the SSL profile to be deleted.

List existing SSL profiles

Call Certz.GetProfileList RPC. The response will list all existing SSL profiles.

A CertificateBundle is to be rotated or updated

Create, and test, a new CertificateBundle.

Send that policy to the target network system with a Certz.RotateCertificateRequest to Certz.Rotate RPC. The RotateCertificateRequest's rotate_request will be a Certz.CertificateBundle.

Verify that the CertificateBundle newly rotated is used by services which require it.

Send a Finalize message to the Certz.Rotate RPC to close out the action.

If the stream is disconnected prior to the Finalize message being sent, the proposed configuration is rolled back automatically.

A Certificate is rotated, the session breaks before Finalize

Create a new Certificate and Key.

Send that certificate to the target network system with a Certz.RotateCertificateRequest to the Certz.Rotate RPC. The RotateCertificateRequest's rotate_request will be a Certz.Certificate.

Verify that the certificate newly deployed is usable by the relevant services, that the services properly present the certificate upon new service connections.

The connection to the network system is broken, there is no Finalize sent.

The gNSI service rolls back the candidate and re-installs the original certificate and key.

Open Questions/Considerations

None to date.

gNSI.cert Telemetry Extension

gnsi-certz.yang

An overview of the changes defined in the gnsi-certz.yang file are shown below.

module: gnsi-certz

  augment /oc-sys:system/oc-sys-grpc:grpc-servers/oc-sys-grpc:grpc-server/oc-sys-grpc:state:
    +--ro certificate-version?                             version
    +--ro certificate-created-on?                          created-on
    +--ro ca-trust-bundle-version?                         version
    +--ro ca-trust-bundle-created-on?                      created-on
    +--ro certificate-revocation-list-bundle-version?      version
    +--ro certificate-revocation-list-bundle-created-on?   created-on
    +--ro counters
       +--ro access-rejects?       oc-yang:counter64
       +--ro last-access-reject?   oc-types:timeticks64
       +--ro access-accepts?       oc-yang:counter64
       +--ro last-access-accept?   oc-types:timeticks64
openconfig-system tree

The openconfig-system subtree after augments defined in the gnsi-certz.yang file is shown below.

For interactive version click here.

module: openconfig-system
  +--rw system
     +--rw config
     |  +--rw hostname?       oc-inet:domain-name
     |  +--rw domain-name?    oc-inet:domain-name
     |  +--rw login-banner?   string
     |  +--rw motd-banner?    string
     +--ro state
     |  +--ro hostname?           oc-inet:domain-name
     |  +--ro domain-name?        oc-inet:domain-name
     |  +--ro login-banner?       string
     |  +--ro motd-banner?        string
     |  +--ro current-datetime?   oc-yang:date-and-time
     |  +--ro boot-time?          oc-types:timeticks64
     +--rw clock
     |  +--rw config
     |  |  +--rw timezone-name?   timezone-name-type
     |  +--ro state
     |     +--ro timezone-name?   timezone-name-type
     +--rw dns
     |  +--rw config
     |  |  +--rw search*   oc-inet:domain-name
     |  +--ro state
     |  |  +--ro search*   oc-inet:domain-name
     |  +--rw servers
     |  |  +--rw server* [address]
     |  |     +--rw address    -> ../config/address
     |  |     +--rw config
     |  |     |  +--rw address?   oc-inet:ip-address
     |  |     |  +--rw port?      oc-inet:port-number
     |  |     +--ro state
     |  |        +--ro address?   oc-inet:ip-address
     |  |        +--ro port?      oc-inet:port-number
     |  +--rw host-entries
     |     +--rw host-entry* [hostname]
     |        +--rw hostname    -> ../config/hostname
     |        +--rw config
     |        |  +--rw hostname?       string
     |        |  +--rw alias*          string
     |        |  +--rw ipv4-address*   oc-inet:ipv4-address
     |        |  +--rw ipv6-address*   oc-inet:ipv6-address
     |        +--ro state
     |           +--ro hostname?       string
     |           +--ro alias*          string
     |           +--ro ipv4-address*   oc-inet:ipv4-address
     |           +--ro ipv6-address*   oc-inet:ipv6-address
     +--rw ntp
     |  +--rw config
     |  |  +--rw enabled?              boolean
     |  |  +--rw ntp-source-address?   oc-inet:ip-address
     |  |  +--rw enable-ntp-auth?      boolean
     |  +--ro state
     |  |  +--ro enabled?              boolean
     |  |  +--ro ntp-source-address?   oc-inet:ip-address
     |  |  +--ro enable-ntp-auth?      boolean
     |  |  +--ro auth-mismatch?        oc-yang:counter64
     |  +--rw ntp-keys
     |  |  +--rw ntp-key* [key-id]
     |  |     +--rw key-id    -> ../config/key-id
     |  |     +--rw config
     |  |     |  +--rw key-id?      uint16
     |  |     |  +--rw key-type?    identityref
     |  |     |  +--rw key-value?   string
     |  |     +--ro state
     |  |        +--ro key-id?      uint16
     |  |        +--ro key-type?    identityref
     |  |        +--ro key-value?   string
     |  +--rw servers
     |     +--rw server* [address]
     |        +--rw address    -> ../config/address
     |        +--rw config
     |        |  +--rw address?            oc-inet:host
     |        |  +--rw port?               oc-inet:port-number
     |        |  +--rw version?            uint8
     |        |  +--rw association-type?   enumeration
     |        |  +--rw iburst?             boolean
     |        |  +--rw prefer?             boolean
     |        +--ro state
     |           +--ro address?            oc-inet:host
     |           +--ro port?               oc-inet:port-number
     |           +--ro version?            uint8
     |           +--ro association-type?   enumeration
     |           +--ro iburst?             boolean
     |           +--ro prefer?             boolean
     |           +--ro stratum?            uint8
     |           +--ro root-delay?         uint32
     |           +--ro root-dispersion?    uint64
     |           +--ro offset?             uint64
     |           +--ro poll-interval?      uint32
     +--rw ssh-server
     |  +--rw config
     |  |  +--rw enable?             boolean
     |  |  +--rw protocol-version?   enumeration
     |  |  +--rw timeout?            uint16
     |  |  +--rw rate-limit?         uint16
     |  |  +--rw session-limit?      uint16
     |  +--ro state
     |     +--ro enable?             boolean
     |     +--ro protocol-version?   enumeration
     |     +--ro timeout?            uint16
     |     +--ro rate-limit?         uint16
     |     +--ro session-limit?      uint16
     +--rw telnet-server
     |  +--rw config
     |  |  +--rw enable?          boolean
     |  |  +--rw timeout?         uint16
     |  |  +--rw rate-limit?      uint16
     |  |  +--rw session-limit?   uint16
     |  +--ro state
     |     +--ro enable?          boolean
     |     +--ro timeout?         uint16
     |     +--ro rate-limit?      uint16
     |     +--ro session-limit?   uint16
     +--rw logging
     |  +--rw console
     |  |  +--rw config
     |  |  +--ro state
     |  |  +--rw selectors
     |  |     +--rw selector* [facility severity]
     |  |        +--rw facility    -> ../config/facility
     |  |        +--rw severity    -> ../config/severity
     |  |        +--rw config
     |  |        |  +--rw facility?   identityref
     |  |        |  +--rw severity?   syslog-severity
     |  |        +--ro state
     |  |           +--ro facility?   identityref
     |  |           +--ro severity?   syslog-severity
     |  +--rw remote-servers
     |     +--rw remote-server* [host]
     |        +--rw host         -> ../config/host
     |        +--rw config
     |        |  +--rw host?             oc-inet:host
     |        |  +--rw source-address?   oc-inet:ip-address
     |        |  +--rw remote-port?      oc-inet:port-number
     |        +--ro state
     |        |  +--ro host?             oc-inet:host
     |        |  +--ro source-address?   oc-inet:ip-address
     |        |  +--ro remote-port?      oc-inet:port-number
     |        +--rw selectors
     |           +--rw selector* [facility severity]
     |              +--rw facility    -> ../config/facility
     |              +--rw severity    -> ../config/severity
     |              +--rw config
     |              |  +--rw facility?   identityref
     |              |  +--rw severity?   syslog-severity
     |              +--ro state
     |                 +--ro facility?   identityref
     |                 +--ro severity?   syslog-severity
     +--rw aaa
     |  +--rw config
     |  +--ro state
     |  +--rw authentication
     |  |  +--rw config
     |  |  |  +--rw authentication-method*   union
     |  |  +--ro state
     |  |  |  +--ro authentication-method*   union
     |  |  +--rw admin-user
     |  |  |  +--rw config
     |  |  |  |  +--rw admin-password?          string
     |  |  |  |  +--rw admin-password-hashed?   oc-aaa-types:crypt-password-type
     |  |  |  +--ro state
     |  |  |     +--ro admin-password?          string
     |  |  |     +--ro admin-password-hashed?   oc-aaa-types:crypt-password-type
     |  |  |     +--ro admin-username?          string
     |  |  +--rw users
     |  |     +--rw user* [username]
     |  |        +--rw username    -> ../config/username
     |  |        +--rw config
     |  |        |  +--rw username?          string
     |  |        |  +--rw password?          string
     |  |        |  +--rw password-hashed?   oc-aaa-types:crypt-password-type
     |  |        |  +--rw ssh-key?           string
     |  |        |  +--rw role?              union
     |  |        +--ro state
     |  |           +--ro username?          string
     |  |           +--ro password?          string
     |  |           +--ro password-hashed?   oc-aaa-types:crypt-password-type
     |  |           +--ro ssh-key?           string
     |  |           +--ro role?              union
     |  +--rw authorization
     |  |  +--rw config
     |  |  |  +--rw authorization-method*   union
     |  |  +--ro state
     |  |  |  +--ro authorization-method*   union
     |  |  +--rw events
     |  |     +--rw event* [event-type]
     |  |        +--rw event-type    -> ../config/event-type
     |  |        +--rw config
     |  |        |  +--rw event-type?   identityref
     |  |        +--ro state
     |  |           +--ro event-type?   identityref
     |  +--rw accounting
     |  |  +--rw config
     |  |  |  +--rw accounting-method*   union
     |  |  +--ro state
     |  |  |  +--ro accounting-method*   union
     |  |  +--rw events
     |  |     +--rw event* [event-type]
     |  |        +--rw event-type    -> ../config/event-type
     |  |        +--rw config
     |  |        |  +--rw event-type?   identityref
     |  |        |  +--rw record?       enumeration
     |  |        +--ro state
     |  |           +--ro event-type?   identityref
     |  |           +--ro record?       enumeration
     |  +--rw server-groups
     |     +--rw server-group* [name]
     |        +--rw name       -> ../config/name
     |        +--rw config
     |        |  +--rw name?   string
     |        |  +--rw type?   identityref
     |        +--ro state
     |        |  +--ro name?   string
     |        |  +--ro type?   identityref
     |        +--rw servers
     |           +--rw server* [address]
     |              +--rw address    -> ../config/address
     |              +--rw config
     |              |  +--rw name?      string
     |              |  +--rw address?   oc-inet:ip-address
     |              |  +--rw timeout?   uint16
     |              +--ro state
     |              |  +--ro name?                  string
     |              |  +--ro address?               oc-inet:ip-address
     |              |  +--ro timeout?               uint16
     |              |  +--ro connection-opens?      oc-yang:counter64
     |              |  +--ro connection-closes?     oc-yang:counter64
     |              |  +--ro connection-aborts?     oc-yang:counter64
     |              |  +--ro connection-failures?   oc-yang:counter64
     |              |  +--ro connection-timeouts?   oc-yang:counter64
     |              |  +--ro messages-sent?         oc-yang:counter64
     |              |  +--ro messages-received?     oc-yang:counter64
     |              |  +--ro errors-received?       oc-yang:counter64
     |              +--rw tacacs
     |              |  +--rw config
     |              |  |  +--rw port?                oc-inet:port-number
     |              |  |  +--rw secret-key?          oc-types:routing-password
     |              |  |  +--rw secret-key-hashed?   oc-aaa-types:crypt-password-type
     |              |  |  +--rw source-address?      oc-inet:ip-address
     |              |  +--ro state
     |              |     +--ro port?                oc-inet:port-number
     |              |     +--ro secret-key?          oc-types:routing-password
     |              |     +--ro secret-key-hashed?   oc-aaa-types:crypt-password-type
     |              |     +--ro source-address?      oc-inet:ip-address
     |              +--rw radius
     |                 +--rw config
     |                 |  +--rw auth-port?             oc-inet:port-number
     |                 |  +--rw acct-port?             oc-inet:port-number
     |                 |  +--rw secret-key?            oc-types:routing-password
     |                 |  +--rw secret-key-hashed?     oc-aaa-types:crypt-password-type
     |                 |  +--rw source-address?        oc-inet:ip-address
     |                 |  +--rw retransmit-attempts?   uint8
     |                 +--ro state
     |                    +--ro auth-port?             oc-inet:port-number
     |                    +--ro acct-port?             oc-inet:port-number
     |                    +--ro secret-key?            oc-types:routing-password
     |                    +--ro secret-key-hashed?     oc-aaa-types:crypt-password-type
     |                    +--ro source-address?        oc-inet:ip-address
     |                    +--ro retransmit-attempts?   uint8
     |                    +--ro counters
     |                       +--ro retried-access-requests?   oc-yang:counter64
     |                       +--ro access-accepts?            oc-yang:counter64
     |                       +--ro access-rejects?            oc-yang:counter64
     |                       +--ro timeout-access-requests?   oc-yang:counter64
     +--rw memory
     |  +--rw config
     |  +--ro state
     |     +--ro physical?   uint64
     |     +--ro reserved?   uint64
     +--ro cpus
     |  +--ro cpu* [index]
     |     +--ro index    -> ../state/index
     |     +--ro state
     |        +--ro index?                union
     |        +--ro total
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro user
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro kernel
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro nice
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro idle
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro wait
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro hardware-interrupt
     |        |  +--ro instant?    oc-types:percentage
     |        |  +--ro avg?        oc-types:percentage
     |        |  +--ro min?        oc-types:percentage
     |        |  +--ro max?        oc-types:percentage
     |        |  +--ro interval?   oc-types:stat-interval
     |        |  +--ro min-time?   oc-types:timeticks64
     |        |  +--ro max-time?   oc-types:timeticks64
     |        +--ro software-interrupt
     |           +--ro instant?    oc-types:percentage
     |           +--ro avg?        oc-types:percentage
     |           +--ro min?        oc-types:percentage
     |           +--ro max?        oc-types:percentage
     |           +--ro interval?   oc-types:stat-interval
     |           +--ro min-time?   oc-types:timeticks64
     |           +--ro max-time?   oc-types:timeticks64
     +--rw processes
     |  +--ro process* [pid]
     |     +--ro pid      -> ../state/pid
     |     +--ro state
     |        +--ro pid?                  uint64
     |        +--ro name?                 string
     |        +--ro args*                 string
     |        +--ro start-time?           oc-types:timeticks64
     |        +--ro cpu-usage-user?       oc-yang:counter64
     |        +--ro cpu-usage-system?     oc-yang:counter64
     |        +--ro cpu-utilization?      oc-types:percentage
     |        +--ro memory-usage?         uint64
     |        +--ro memory-utilization?   oc-types:percentage
     +--ro alarms
     |  +--ro alarm* [id]
     |     +--ro id        -> ../state/id
     |     +--ro config
     |     +--ro state
     |        +--ro id?             string
     |        +--ro resource?       string
     |        +--ro text?           string
     |        +--ro time-created?   oc-types:timeticks64
     |        +--ro severity?       identityref
     |        +--ro type-id?        union
     +--rw messages
     |  +--rw config
     |  |  +--rw severity?   oc-log:syslog-severity
     |  +--ro state
     |  |  +--ro severity?   oc-log:syslog-severity
     |  |  +--ro message
     |  |     +--ro msg?        string
     |  |     +--ro priority?   uint8
     |  |     +--ro app-name?   string
     |  |     +--ro procid?     string
     |  |     +--ro msgid?      string
     |  +--rw debug-entries
     |     +--rw debug-service* [service]
     |        +--rw service    -> ../config/service
     |        +--rw config
     |        |  +--rw service?   identityref
     |        |  +--rw enabled?   boolean
     |        +--ro state
     |           +--ro service?   identityref
     |           +--ro enabled?   boolean
     +--rw license
     |  +--rw licenses
     |     +--rw license* [license-id]
     |        +--rw license-id    -> ../config/license-id
     |        +--rw config
     |        |  +--rw license-id?     string
     |        |  +--rw license-data?   union
     |        |  +--rw active?         boolean
     |        +--ro state
     |           +--ro license-id?        string
     |           +--ro license-data?      union
     |           +--ro active?            boolean
     |           +--ro description?       string
     |           +--ro issue-date?        uint64
     |           +--ro expiration-date?   uint64
     |           +--ro in-use?            boolean
     |           +--ro expired?           boolean
     |           +--ro valid?             boolean
     +--rw oc-sys-grpc:grpc-servers
        +--rw oc-sys-grpc:grpc-server* [name]
           +--rw oc-sys-grpc:name      -> ../config/name
           +--rw oc-sys-grpc:config
           |  +--rw oc-sys-grpc:name?                      string
           |  +--rw oc-sys-grpc:services*                  identityref
           |  +--rw oc-sys-grpc:enable?                    boolean
           |  +--rw oc-sys-grpc:port?                      oc-inet:port-number
           |  +--rw oc-sys-grpc:transport-security?        boolean
           |  +--rw oc-sys-grpc:certificate-id?            string
           |  +--rw oc-sys-grpc:metadata-authentication?   boolean
           |  +--rw oc-sys-grpc:listen-addresses*          union
           |  +--rw oc-sys-grpc:network-instance?          oc-ni:network-instance-ref
           +--ro oc-sys-grpc:state
              +--ro oc-sys-grpc:name?                                           string
              +--ro oc-sys-grpc:services*                                       identityref
              +--ro oc-sys-grpc:enable?                                         boolean
              +--ro oc-sys-grpc:port?                                           oc-inet:port-number
              +--ro oc-sys-grpc:transport-security?                             boolean
              +--ro oc-sys-grpc:certificate-id?                                 string
              +--ro oc-sys-grpc:metadata-authentication?                        boolean
              +--ro oc-sys-grpc:listen-addresses*                               union
              +--ro oc-sys-grpc:network-instance?                               oc-ni:network-instance-ref
              +--ro gnsi-certz:certificate-version?                             version
              +--ro gnsi-certz:certificate-created-on?                          created-on
              +--ro gnsi-certz:ca-trust-bundle-version?                         version
              +--ro gnsi-certz:ca-trust-bundle-created-on?                      created-on
              +--ro gnsi-certz:certificate-revocation-list-bundle-version?      version
              +--ro gnsi-certz:certificate-revocation-list-bundle-created-on?   created-on
              +--ro gnsi-certz:counters
                 +--ro gnsi-certz:access-rejects?       oc-yang:counter64
                 +--ro gnsi-certz:last-access-reject?   oc-types:timeticks64
                 +--ro gnsi-certz:access-accepts?       oc-yang:counter64
                 +--ro gnsi-certz:last-access-accept?   oc-types:timeticks64

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var (
	CSRSuite_name = map[int32]string{
		0:  "CSRSUITE_CIPHER_UNSPECIFIED",
		1:  "CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_256",
		2:  "CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_384",
		3:  "CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_512",
		4:  "CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_256",
		5:  "CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_384",
		6:  "CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_512",
		7:  "CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_256",
		8:  "CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_384",
		9:  "CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_512",
		10: "CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_256",
		11: "CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_384",
		12: "CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_512",
		13: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_256",
		14: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_384",
		15: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_512",
		16: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_256",
		17: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_384",
		18: "CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_512",
		19: "CSRSUITE_X509_KEY_TYPE_EDDSA_ED25519",
	}
	CSRSuite_value = map[string]int32{
		"CSRSUITE_CIPHER_UNSPECIFIED":                                           0,
		"CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_256":         1,
		"CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_384":         2,
		"CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_512":         3,
		"CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_256":         4,
		"CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_384":         5,
		"CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_512":         6,
		"CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_256":         7,
		"CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_384":         8,
		"CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_512":         9,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_256": 10,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_384": 11,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_512": 12,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_256":  13,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_384":  14,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_512":  15,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_256":  16,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_384":  17,
		"CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_512":  18,
		"CSRSUITE_X509_KEY_TYPE_EDDSA_ED25519":                                  19,
	}
)

Enum value maps for CSRSuite.

View Source 
var (
	CertificateType_name = map[int32]string{
		0: "CERTIFICATE_TYPE_UNSPECIFIED",
		1: "CERTIFICATE_TYPE_X509",
	}
	CertificateType_value = map[string]int32{
		"CERTIFICATE_TYPE_UNSPECIFIED": 0,
		"CERTIFICATE_TYPE_X509":        1,
	}
)

Enum value maps for CertificateType.

View Source 
var (
	CertificateEncoding_name = map[int32]string{
		0: "CERTIFICATE_ENCODING_UNSPECIFIED",
		1: "CERTIFICATE_ENCODING_PEM",
		2: "CERTIFICATE_ENCODING_DER",
		3: "CERTIFICATE_ENCODING_CRT",
	}
	CertificateEncoding_value = map[string]int32{
		"CERTIFICATE_ENCODING_UNSPECIFIED": 0,
		"CERTIFICATE_ENCODING_PEM":         1,
		"CERTIFICATE_ENCODING_DER":         2,
		"CERTIFICATE_ENCODING_CRT":         3,
	}
)

Enum value maps for CertificateEncoding.

View Source 
var Certz_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "gnsi.certz.Certz",
	HandlerType: (*CertzServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "AddProfile",
			Handler:    _Certz_AddProfile_Handler,
		},
		{
			MethodName: "DeleteProfile",
			Handler:    _Certz_DeleteProfile_Handler,
		},
		{
			MethodName: "GetProfileList",
			Handler:    _Certz_GetProfileList_Handler,
		},
		{
			MethodName: "CanGenerateCSR",
			Handler:    _Certz_CanGenerateCSR_Handler,
		},
	},
	Streams: []grpc.StreamDesc{
		{
			StreamName:    "Rotate",
			Handler:       _Certz_Rotate_Handler,
			ServerStreams: true,
			ClientStreams: true,
		},
	},
	Metadata: "github.com/openconfig/gnsi/certz/certz.proto",
}

Certz_ServiceDesc is the grpc.ServiceDesc for Certz service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

View Source 
var File_github_com_openconfig_gnsi_certz_certz_proto protoreflect.FileDescriptor

Functions

func RegisterCertzServer 

func RegisterCertzServer(s grpc.ServiceRegistrar, srv CertzServer)

Types

type AddProfileRequest 

type AddProfileRequest struct {
	SslProfileId string `protobuf:"bytes,1,opt,name=ssl_profile_id,json=sslProfileId,proto3" json:"ssl_profile_id,omitempty"`
	// contains filtered or unexported fields
}

func (*AddProfileRequest) Descriptor deprecated 

func (*AddProfileRequest) Descriptor() ([]byte, []int)

Deprecated: Use AddProfileRequest.ProtoReflect.Descriptor instead.

func (*AddProfileRequest) GetSslProfileId 

func (x *AddProfileRequest) GetSslProfileId() string

func (*AddProfileRequest) ProtoMessage 

func (*AddProfileRequest) ProtoMessage()

func (*AddProfileRequest) ProtoReflect 

func (x *AddProfileRequest) ProtoReflect() protoreflect.Message

func (*AddProfileRequest) Reset 

func (x *AddProfileRequest) Reset()

func (*AddProfileRequest) String 

func (x *AddProfileRequest) String() string

type AddProfileResponse 

type AddProfileResponse struct {
	// contains filtered or unexported fields
}

func (*AddProfileResponse) Descriptor deprecated 

func (*AddProfileResponse) Descriptor() ([]byte, []int)

Deprecated: Use AddProfileResponse.ProtoReflect.Descriptor instead.

func (*AddProfileResponse) ProtoMessage 

func (*AddProfileResponse) ProtoMessage()

func (*AddProfileResponse) ProtoReflect 

func (x *AddProfileResponse) ProtoReflect() protoreflect.Message

func (*AddProfileResponse) Reset 

func (x *AddProfileResponse) Reset()

func (*AddProfileResponse) String 

func (x *AddProfileResponse) String() string

type CSRParams 

type CSRParams struct {
	CsrSuite           CSRSuite        `protobuf:"varint,1,opt,name=csr_suite,json=csrSuite,proto3,enum=gnsi.certz.CSRSuite" json:"csr_suite,omitempty"`
	CommonName         string          `protobuf:"bytes,2,opt,name=common_name,json=commonName,proto3" json:"common_name,omitempty"`
	Country            string          `protobuf:"bytes,3,opt,name=country,proto3" json:"country,omitempty"`
	State              string          `protobuf:"bytes,4,opt,name=state,proto3" json:"state,omitempty"`
	City               string          `protobuf:"bytes,5,opt,name=city,proto3" json:"city,omitempty"`
	Organization       string          `protobuf:"bytes,6,opt,name=organization,proto3" json:"organization,omitempty"`
	OrganizationalUnit string          `protobuf:"bytes,7,opt,name=organizational_unit,json=organizationalUnit,proto3" json:"organizational_unit,omitempty"`
	IpAddress          string          `protobuf:"bytes,8,opt,name=ip_address,json=ipAddress,proto3" json:"ip_address,omitempty"`
	EmailId            string          `protobuf:"bytes,9,opt,name=email_id,json=emailId,proto3" json:"email_id,omitempty"`
	San                *V3ExtensionSAN `protobuf:"bytes,10,opt,name=san,proto3" json:"san,omitempty"`
	// contains filtered or unexported fields
}

func (*CSRParams) Descriptor deprecated 

func (*CSRParams) Descriptor() ([]byte, []int)

Deprecated: Use CSRParams.ProtoReflect.Descriptor instead.

func (*CSRParams) GetCity 

func (x *CSRParams) GetCity() string

func (*CSRParams) GetCommonName 

func (x *CSRParams) GetCommonName() string

func (*CSRParams) GetCountry 

func (x *CSRParams) GetCountry() string

func (*CSRParams) GetCsrSuite 

func (x *CSRParams) GetCsrSuite() CSRSuite

func (*CSRParams) GetEmailId 

func (x *CSRParams) GetEmailId() string

func (*CSRParams) GetIpAddress 

func (x *CSRParams) GetIpAddress() string

func (*CSRParams) GetOrganization 

func (x *CSRParams) GetOrganization() string

func (*CSRParams) GetOrganizationalUnit 

func (x *CSRParams) GetOrganizationalUnit() string

func (*CSRParams) GetSan 

func (x *CSRParams) GetSan() *V3ExtensionSAN

func (*CSRParams) GetState 

func (x *CSRParams) GetState() string

func (*CSRParams) ProtoMessage 

func (*CSRParams) ProtoMessage()

func (*CSRParams) ProtoReflect 

func (x *CSRParams) ProtoReflect() protoreflect.Message

func (*CSRParams) Reset 

func (x *CSRParams) Reset()

func (*CSRParams) String 

func (x *CSRParams) String() string

type CSRSuite 

type CSRSuite int32
const (
	CSRSuite_CSRSUITE_CIPHER_UNSPECIFIED                                           CSRSuite = 0
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_256         CSRSuite = 1
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_384         CSRSuite = 2
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_2048_SIGNATURE_ALGORITHM_SHA_2_512         CSRSuite = 3
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_256         CSRSuite = 4
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_384         CSRSuite = 5
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_3072_SIGNATURE_ALGORITHM_SHA_2_512         CSRSuite = 6
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_256         CSRSuite = 7
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_384         CSRSuite = 8
	CSRSuite_CSRSUITE_X509_KEY_TYPE_RSA_4096_SIGNATURE_ALGORITHM_SHA_2_512         CSRSuite = 9
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_256 CSRSuite = 10
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_384 CSRSuite = 11
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_PRIME256V1_SIGNATURE_ALGORITHM_SHA_2_512 CSRSuite = 12
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_256  CSRSuite = 13
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_384  CSRSuite = 14
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP384R1_SIGNATURE_ALGORITHM_SHA_2_512  CSRSuite = 15
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_256  CSRSuite = 16
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_384  CSRSuite = 17
	CSRSuite_CSRSUITE_X509_KEY_TYPE_ECDSA_SECP521R1_SIGNATURE_ALGORITHM_SHA_2_512  CSRSuite = 18
	CSRSuite_CSRSUITE_X509_KEY_TYPE_EDDSA_ED25519                                  CSRSuite = 19
)

func (CSRSuite) Descriptor 

func (CSRSuite) Descriptor() protoreflect.EnumDescriptor

func (CSRSuite) Enum 

func (x CSRSuite) Enum() *CSRSuite

func (CSRSuite) EnumDescriptor deprecated 

func (CSRSuite) EnumDescriptor() ([]byte, []int)

Deprecated: Use CSRSuite.Descriptor instead.

func (CSRSuite) Number 

func (x CSRSuite) Number() protoreflect.EnumNumber

func (CSRSuite) String 

func (x CSRSuite) String() string

func (CSRSuite) Type 

func (CSRSuite) Type() protoreflect.EnumType

type CanGenerateCSRRequest 

type CanGenerateCSRRequest struct {
	Params *CSRParams `protobuf:"bytes,1,opt,name=params,proto3" json:"params,omitempty"`
	// contains filtered or unexported fields
}

func (*CanGenerateCSRRequest) Descriptor deprecated 

func (*CanGenerateCSRRequest) Descriptor() ([]byte, []int)

Deprecated: Use CanGenerateCSRRequest.ProtoReflect.Descriptor instead.

func (*CanGenerateCSRRequest) GetParams 

func (x *CanGenerateCSRRequest) GetParams() *CSRParams

func (*CanGenerateCSRRequest) ProtoMessage 

func (*CanGenerateCSRRequest) ProtoMessage()

func (*CanGenerateCSRRequest) ProtoReflect 

func (x *CanGenerateCSRRequest) ProtoReflect() protoreflect.Message

func (*CanGenerateCSRRequest) Reset 

func (x *CanGenerateCSRRequest) Reset()

func (*CanGenerateCSRRequest) String 

func (x *CanGenerateCSRRequest) String() string

type CanGenerateCSRResponse 

type CanGenerateCSRResponse struct {
	CanGenerate bool `protobuf:"varint,4,opt,name=can_generate,json=canGenerate,proto3" json:"can_generate,omitempty"`
	// contains filtered or unexported fields
}

func (*CanGenerateCSRResponse) Descriptor deprecated 

func (*CanGenerateCSRResponse) Descriptor() ([]byte, []int)

Deprecated: Use CanGenerateCSRResponse.ProtoReflect.Descriptor instead.

func (*CanGenerateCSRResponse) GetCanGenerate 

func (x *CanGenerateCSRResponse) GetCanGenerate() bool

func (*CanGenerateCSRResponse) ProtoMessage 

func (*CanGenerateCSRResponse) ProtoMessage()

func (*CanGenerateCSRResponse) ProtoReflect 

func (x *CanGenerateCSRResponse) ProtoReflect() protoreflect.Message

func (*CanGenerateCSRResponse) Reset 

func (x *CanGenerateCSRResponse) Reset()

func (*CanGenerateCSRResponse) String 

func (x *CanGenerateCSRResponse) String() string

type Certificate 

type Certificate struct {
	Type        CertificateType     `protobuf:"varint,1,opt,name=type,proto3,enum=gnsi.certz.CertificateType" json:"type,omitempty"`
	Encoding    CertificateEncoding `protobuf:"varint,2,opt,name=encoding,proto3,enum=gnsi.certz.CertificateEncoding" json:"encoding,omitempty"`
	Certificate []byte              `protobuf:"bytes,3,opt,name=certificate,proto3" json:"certificate,omitempty"`
	PrivateKey  []byte              `protobuf:"bytes,4,opt,name=private_key,json=privateKey,proto3" json:"private_key,omitempty"`
	// contains filtered or unexported fields
}

func (*Certificate) Descriptor deprecated 

func (*Certificate) Descriptor() ([]byte, []int)

Deprecated: Use Certificate.ProtoReflect.Descriptor instead.

func (*Certificate) GetCertificate 

func (x *Certificate) GetCertificate() []byte

func (*Certificate) GetEncoding 

func (x *Certificate) GetEncoding() CertificateEncoding

func (*Certificate) GetPrivateKey 

func (x *Certificate) GetPrivateKey() []byte

func (*Certificate) GetType 

func (x *Certificate) GetType() CertificateType

func (*Certificate) ProtoMessage 

func (*Certificate) ProtoMessage()

func (*Certificate) ProtoReflect 

func (x *Certificate) ProtoReflect() protoreflect.Message

func (*Certificate) Reset 

func (x *Certificate) Reset()

func (*Certificate) String 

func (x *Certificate) String() string

type CertificateChain 

type CertificateChain struct {
	Certificate *Certificate      `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	Parent      *CertificateChain `protobuf:"bytes,2,opt,name=parent,proto3" json:"parent,omitempty"`
	// contains filtered or unexported fields
}

func (*CertificateChain) Descriptor deprecated 

func (*CertificateChain) Descriptor() ([]byte, []int)

Deprecated: Use CertificateChain.ProtoReflect.Descriptor instead.

func (*CertificateChain) GetCertificate 

func (x *CertificateChain) GetCertificate() *Certificate

func (*CertificateChain) GetParent 

func (x *CertificateChain) GetParent() *CertificateChain

func (*CertificateChain) ProtoMessage 

func (*CertificateChain) ProtoMessage()

func (*CertificateChain) ProtoReflect 

func (x *CertificateChain) ProtoReflect() protoreflect.Message

func (*CertificateChain) Reset 

func (x *CertificateChain) Reset()

func (*CertificateChain) String 

func (x *CertificateChain) String() string

type CertificateEncoding 

type CertificateEncoding int32
const (
	CertificateEncoding_CERTIFICATE_ENCODING_UNSPECIFIED CertificateEncoding = 0
	CertificateEncoding_CERTIFICATE_ENCODING_PEM         CertificateEncoding = 1
	CertificateEncoding_CERTIFICATE_ENCODING_DER         CertificateEncoding = 2
	CertificateEncoding_CERTIFICATE_ENCODING_CRT         CertificateEncoding = 3
)

func (CertificateEncoding) Descriptor 

func (CertificateEncoding) Descriptor() protoreflect.EnumDescriptor

func (CertificateEncoding) Enum 

func (x CertificateEncoding) Enum() *CertificateEncoding

func (CertificateEncoding) EnumDescriptor deprecated 

func (CertificateEncoding) EnumDescriptor() ([]byte, []int)

Deprecated: Use CertificateEncoding.Descriptor instead.

func (CertificateEncoding) Number 

func (x CertificateEncoding) Number() protoreflect.EnumNumber

func (CertificateEncoding) String 

func (x CertificateEncoding) String() string

func (CertificateEncoding) Type 

func (CertificateEncoding) Type() protoreflect.EnumType

type CertificateRevocationList 

type CertificateRevocationList struct {
	Type                      CertificateType     `protobuf:"varint,1,opt,name=type,proto3,enum=gnsi.certz.CertificateType" json:"type,omitempty"`
	Encoding                  CertificateEncoding `protobuf:"varint,2,opt,name=encoding,proto3,enum=gnsi.certz.CertificateEncoding" json:"encoding,omitempty"`
	CertificateRevocationList []byte              `` /* 138-byte string literal not displayed */
	Id                        string              `protobuf:"bytes,4,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

func (*CertificateRevocationList) Descriptor deprecated 

func (*CertificateRevocationList) Descriptor() ([]byte, []int)

Deprecated: Use CertificateRevocationList.ProtoReflect.Descriptor instead.

func (*CertificateRevocationList) GetCertificateRevocationList 

func (x *CertificateRevocationList) GetCertificateRevocationList() []byte

func (*CertificateRevocationList) GetEncoding 

func (x *CertificateRevocationList) GetEncoding() CertificateEncoding

func (*CertificateRevocationList) GetId 

func (x *CertificateRevocationList) GetId() string

func (*CertificateRevocationList) GetType 

func (x *CertificateRevocationList) GetType() CertificateType

func (*CertificateRevocationList) ProtoMessage 

func (*CertificateRevocationList) ProtoMessage()

func (*CertificateRevocationList) ProtoReflect 

func (x *CertificateRevocationList) ProtoReflect() protoreflect.Message

func (*CertificateRevocationList) Reset 

func (x *CertificateRevocationList) Reset()

func (*CertificateRevocationList) String 

func (x *CertificateRevocationList) String() string

type CertificateRevocationListBundle 

type CertificateRevocationListBundle struct {
	CertificateRevocationLists []*CertificateRevocationList `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*CertificateRevocationListBundle) Descriptor deprecated 

func (*CertificateRevocationListBundle) Descriptor() ([]byte, []int)

Deprecated: Use CertificateRevocationListBundle.ProtoReflect.Descriptor instead.

func (*CertificateRevocationListBundle) GetCertificateRevocationLists 

func (x *CertificateRevocationListBundle) GetCertificateRevocationLists() []*CertificateRevocationList

func (*CertificateRevocationListBundle) ProtoMessage 

func (*CertificateRevocationListBundle) ProtoMessage()

func (*CertificateRevocationListBundle) ProtoReflect 

func (x *CertificateRevocationListBundle) ProtoReflect() protoreflect.Message

func (*CertificateRevocationListBundle) Reset 

func (x *CertificateRevocationListBundle) Reset()

func (*CertificateRevocationListBundle) String 

func (x *CertificateRevocationListBundle) String() string

type CertificateSigningRequest 

type CertificateSigningRequest struct {
	Type                      CertificateType     `protobuf:"varint,1,opt,name=type,proto3,enum=gnsi.certz.CertificateType" json:"type,omitempty"`
	Encoding                  CertificateEncoding `protobuf:"varint,2,opt,name=encoding,proto3,enum=gnsi.certz.CertificateEncoding" json:"encoding,omitempty"`
	CertificateSigningRequest []byte              `` /* 138-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*CertificateSigningRequest) Descriptor deprecated 

func (*CertificateSigningRequest) Descriptor() ([]byte, []int)

Deprecated: Use CertificateSigningRequest.ProtoReflect.Descriptor instead.

func (*CertificateSigningRequest) GetCertificateSigningRequest 

func (x *CertificateSigningRequest) GetCertificateSigningRequest() []byte

func (*CertificateSigningRequest) GetEncoding 

func (x *CertificateSigningRequest) GetEncoding() CertificateEncoding

func (*CertificateSigningRequest) GetType 

func (x *CertificateSigningRequest) GetType() CertificateType

func (*CertificateSigningRequest) ProtoMessage 

func (*CertificateSigningRequest) ProtoMessage()

func (*CertificateSigningRequest) ProtoReflect 

func (x *CertificateSigningRequest) ProtoReflect() protoreflect.Message

func (*CertificateSigningRequest) Reset 

func (x *CertificateSigningRequest) Reset()

func (*CertificateSigningRequest) String 

func (x *CertificateSigningRequest) String() string

type CertificateType 

type CertificateType int32
const (
	CertificateType_CERTIFICATE_TYPE_UNSPECIFIED CertificateType = 0
	CertificateType_CERTIFICATE_TYPE_X509        CertificateType = 1
)

func (CertificateType) Descriptor 

func (CertificateType) Descriptor() protoreflect.EnumDescriptor

func (CertificateType) Enum 

func (x CertificateType) Enum() *CertificateType

func (CertificateType) EnumDescriptor deprecated 

func (CertificateType) EnumDescriptor() ([]byte, []int)

Deprecated: Use CertificateType.Descriptor instead.

func (CertificateType) Number 

func (x CertificateType) Number() protoreflect.EnumNumber

func (CertificateType) String 

func (x CertificateType) String() string

func (CertificateType) Type 

func (CertificateType) Type() protoreflect.EnumType

type CertzClient 

type CertzClient interface {
	Rotate(ctx context.Context, opts ...grpc.CallOption) (Certz_RotateClient, error)
	AddProfile(ctx context.Context, in *AddProfileRequest, opts ...grpc.CallOption) (*AddProfileResponse, error)
	DeleteProfile(ctx context.Context, in *DeleteProfileRequest, opts ...grpc.CallOption) (*DeleteProfileResponse, error)
	GetProfileList(ctx context.Context, in *GetProfileListRequest, opts ...grpc.CallOption) (*GetProfileListResponse, error)
	CanGenerateCSR(ctx context.Context, in *CanGenerateCSRRequest, opts ...grpc.CallOption) (*CanGenerateCSRResponse, error)
}

CertzClient is the client API for Certz service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

func NewCertzClient 

func NewCertzClient(cc grpc.ClientConnInterface) CertzClient

type CertzServer 

type CertzServer interface {
	Rotate(Certz_RotateServer) error
	AddProfile(context.Context, *AddProfileRequest) (*AddProfileResponse, error)
	DeleteProfile(context.Context, *DeleteProfileRequest) (*DeleteProfileResponse, error)
	GetProfileList(context.Context, *GetProfileListRequest) (*GetProfileListResponse, error)
	CanGenerateCSR(context.Context, *CanGenerateCSRRequest) (*CanGenerateCSRResponse, error)
	// contains filtered or unexported methods
}

CertzServer is the server API for Certz service. All implementations must embed UnimplementedCertzServer for forward compatibility

type Certz_RotateClient 

type Certz_RotateClient interface {
	Send(*RotateCertificateRequest) error
	Recv() (*RotateCertificateResponse, error)
	grpc.ClientStream
}

type Certz_RotateServer 

type Certz_RotateServer interface {
	Send(*RotateCertificateResponse) error
	Recv() (*RotateCertificateRequest, error)
	grpc.ServerStream
}

type DeleteProfileRequest 

type DeleteProfileRequest struct {
	SslProfileId string `protobuf:"bytes,1,opt,name=ssl_profile_id,json=sslProfileId,proto3" json:"ssl_profile_id,omitempty"`
	// contains filtered or unexported fields
}

func (*DeleteProfileRequest) Descriptor deprecated 

func (*DeleteProfileRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProfileRequest.ProtoReflect.Descriptor instead.

func (*DeleteProfileRequest) GetSslProfileId 

func (x *DeleteProfileRequest) GetSslProfileId() string

func (*DeleteProfileRequest) ProtoMessage 

func (*DeleteProfileRequest) ProtoMessage()

func (*DeleteProfileRequest) ProtoReflect 

func (x *DeleteProfileRequest) ProtoReflect() protoreflect.Message

func (*DeleteProfileRequest) Reset 

func (x *DeleteProfileRequest) Reset()

func (*DeleteProfileRequest) String 

func (x *DeleteProfileRequest) String() string

type DeleteProfileResponse 

type DeleteProfileResponse struct {
	// contains filtered or unexported fields
}

func (*DeleteProfileResponse) Descriptor deprecated 

func (*DeleteProfileResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeleteProfileResponse.ProtoReflect.Descriptor instead.

func (*DeleteProfileResponse) ProtoMessage 

func (*DeleteProfileResponse) ProtoMessage()

func (*DeleteProfileResponse) ProtoReflect 

func (x *DeleteProfileResponse) ProtoReflect() protoreflect.Message

func (*DeleteProfileResponse) Reset 

func (x *DeleteProfileResponse) Reset()

func (*DeleteProfileResponse) String 

func (x *DeleteProfileResponse) String() string

type Entity 

type Entity struct {
	Version   string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	CreatedOn uint64 `protobuf:"varint,2,opt,name=created_on,json=createdOn,proto3" json:"created_on,omitempty"`
	// Types that are assignable to Entity:
	//	*Entity_CertificateChain
	//	*Entity_TrustBundle
	//	*Entity_CertificateRevocationListBundle
	Entity isEntity_Entity `protobuf_oneof:"entity"`
	// contains filtered or unexported fields
}

func (*Entity) Descriptor deprecated 

func (*Entity) Descriptor() ([]byte, []int)

Deprecated: Use Entity.ProtoReflect.Descriptor instead.

func (*Entity) GetCertificateChain 

func (x *Entity) GetCertificateChain() *CertificateChain

func (*Entity) GetCertificateRevocationListBundle 

func (x *Entity) GetCertificateRevocationListBundle() *CertificateRevocationListBundle

func (*Entity) GetCreatedOn 

func (x *Entity) GetCreatedOn() uint64

func (*Entity) GetEntity 

func (m *Entity) GetEntity() isEntity_Entity

func (*Entity) GetTrustBundle 

func (x *Entity) GetTrustBundle() *CertificateChain

func (*Entity) GetVersion 

func (x *Entity) GetVersion() string

func (*Entity) ProtoMessage 

func (*Entity) ProtoMessage()

func (*Entity) ProtoReflect 

func (x *Entity) ProtoReflect() protoreflect.Message

func (*Entity) Reset 

func (x *Entity) Reset()

func (*Entity) String 

func (x *Entity) String() string

type Entity_CertificateChain 

type Entity_CertificateChain struct {
	CertificateChain *CertificateChain `protobuf:"bytes,3,opt,name=certificate_chain,json=certificateChain,proto3,oneof"`
}

type Entity_CertificateRevocationListBundle 

type Entity_CertificateRevocationListBundle struct {
	CertificateRevocationListBundle *CertificateRevocationListBundle `protobuf:"bytes,5,opt,name=certificate_revocation_list_bundle,json=certificateRevocationListBundle,proto3,oneof"`
}

type Entity_TrustBundle 

type Entity_TrustBundle struct {
	TrustBundle *CertificateChain `protobuf:"bytes,4,opt,name=trust_bundle,json=trustBundle,proto3,oneof"`
}

type FinalizeRequest 

type FinalizeRequest struct {
	// contains filtered or unexported fields
}

func (*FinalizeRequest) Descriptor deprecated 

func (*FinalizeRequest) Descriptor() ([]byte, []int)

Deprecated: Use FinalizeRequest.ProtoReflect.Descriptor instead.

func (*FinalizeRequest) ProtoMessage 

func (*FinalizeRequest) ProtoMessage()

func (*FinalizeRequest) ProtoReflect 

func (x *FinalizeRequest) ProtoReflect() protoreflect.Message

func (*FinalizeRequest) Reset 

func (x *FinalizeRequest) Reset()

func (*FinalizeRequest) String 

func (x *FinalizeRequest) String() string

type GenerateCSRRequest 

type GenerateCSRRequest struct {
	Params *CSRParams `protobuf:"bytes,1,opt,name=params,proto3" json:"params,omitempty"`
	// contains filtered or unexported fields
}

func (*GenerateCSRRequest) Descriptor deprecated 

func (*GenerateCSRRequest) Descriptor() ([]byte, []int)

Deprecated: Use GenerateCSRRequest.ProtoReflect.Descriptor instead.

func (*GenerateCSRRequest) GetParams 

func (x *GenerateCSRRequest) GetParams() *CSRParams

func (*GenerateCSRRequest) ProtoMessage 

func (*GenerateCSRRequest) ProtoMessage()

func (*GenerateCSRRequest) ProtoReflect 

func (x *GenerateCSRRequest) ProtoReflect() protoreflect.Message

func (*GenerateCSRRequest) Reset 

func (x *GenerateCSRRequest) Reset()

func (*GenerateCSRRequest) String 

func (x *GenerateCSRRequest) String() string

type GenerateCSRResponse 

type GenerateCSRResponse struct {
	CertificateSigningRequest *CertificateSigningRequest `` /* 138-byte string literal not displayed */
	// contains filtered or unexported fields
}

func (*GenerateCSRResponse) Descriptor deprecated 

func (*GenerateCSRResponse) Descriptor() ([]byte, []int)

Deprecated: Use GenerateCSRResponse.ProtoReflect.Descriptor instead.

func (*GenerateCSRResponse) GetCertificateSigningRequest 

func (x *GenerateCSRResponse) GetCertificateSigningRequest() *CertificateSigningRequest

func (*GenerateCSRResponse) ProtoMessage 

func (*GenerateCSRResponse) ProtoMessage()

func (*GenerateCSRResponse) ProtoReflect 

func (x *GenerateCSRResponse) ProtoReflect() protoreflect.Message

func (*GenerateCSRResponse) Reset 

func (x *GenerateCSRResponse) Reset()

func (*GenerateCSRResponse) String 

func (x *GenerateCSRResponse) String() string

type GetProfileListRequest 

type GetProfileListRequest struct {
	// contains filtered or unexported fields
}

func (*GetProfileListRequest) Descriptor deprecated 

func (*GetProfileListRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetProfileListRequest.ProtoReflect.Descriptor instead.

func (*GetProfileListRequest) ProtoMessage 

func (*GetProfileListRequest) ProtoMessage()

func (*GetProfileListRequest) ProtoReflect 

func (x *GetProfileListRequest) ProtoReflect() protoreflect.Message

func (*GetProfileListRequest) Reset 

func (x *GetProfileListRequest) Reset()

func (*GetProfileListRequest) String 

func (x *GetProfileListRequest) String() string

type GetProfileListResponse 

type GetProfileListResponse struct {
	SslProfileIds []string `protobuf:"bytes,1,rep,name=ssl_profile_ids,json=sslProfileIds,proto3" json:"ssl_profile_ids,omitempty"`
	// contains filtered or unexported fields
}

func (*GetProfileListResponse) Descriptor deprecated 

func (*GetProfileListResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetProfileListResponse.ProtoReflect.Descriptor instead.

func (*GetProfileListResponse) GetSslProfileIds 

func (x *GetProfileListResponse) GetSslProfileIds() []string

func (*GetProfileListResponse) ProtoMessage 

func (*GetProfileListResponse) ProtoMessage()

func (*GetProfileListResponse) ProtoReflect 

func (x *GetProfileListResponse) ProtoReflect() protoreflect.Message

func (*GetProfileListResponse) Reset 

func (x *GetProfileListResponse) Reset()

func (*GetProfileListResponse) String 

func (x *GetProfileListResponse) String() string

type RotateCertificateRequest 

type RotateCertificateRequest struct {
	ForceOverwrite bool   `protobuf:"varint,1,opt,name=force_overwrite,json=forceOverwrite,proto3" json:"force_overwrite,omitempty"`
	SslProfileId   string `protobuf:"bytes,2,opt,name=ssl_profile_id,json=sslProfileId,proto3" json:"ssl_profile_id,omitempty"`
	// Types that are assignable to RotateRequest:
	//	*RotateCertificateRequest_GenerateCsr
	//	*RotateCertificateRequest_Certificates
	//	*RotateCertificateRequest_FinalizeRotation
	RotateRequest isRotateCertificateRequest_RotateRequest `protobuf_oneof:"rotate_request"`
	// contains filtered or unexported fields
}

func (*RotateCertificateRequest) Descriptor deprecated 

func (*RotateCertificateRequest) Descriptor() ([]byte, []int)

Deprecated: Use RotateCertificateRequest.ProtoReflect.Descriptor instead.

func (*RotateCertificateRequest) GetCertificates 

func (x *RotateCertificateRequest) GetCertificates() *UploadRequest

func (*RotateCertificateRequest) GetFinalizeRotation 

func (x *RotateCertificateRequest) GetFinalizeRotation() *FinalizeRequest

func (*RotateCertificateRequest) GetForceOverwrite 

func (x *RotateCertificateRequest) GetForceOverwrite() bool

func (*RotateCertificateRequest) GetGenerateCsr 

func (x *RotateCertificateRequest) GetGenerateCsr() *GenerateCSRRequest

func (*RotateCertificateRequest) GetRotateRequest 

func (m *RotateCertificateRequest) GetRotateRequest() isRotateCertificateRequest_RotateRequest

func (*RotateCertificateRequest) GetSslProfileId 

func (x *RotateCertificateRequest) GetSslProfileId() string

func (*RotateCertificateRequest) ProtoMessage 

func (*RotateCertificateRequest) ProtoMessage()

func (*RotateCertificateRequest) ProtoReflect 

func (x *RotateCertificateRequest) ProtoReflect() protoreflect.Message

func (*RotateCertificateRequest) Reset 

func (x *RotateCertificateRequest) Reset()

func (*RotateCertificateRequest) String 

func (x *RotateCertificateRequest) String() string

type RotateCertificateRequest_Certificates 

type RotateCertificateRequest_Certificates struct {
	Certificates *UploadRequest `protobuf:"bytes,4,opt,name=certificates,proto3,oneof"`
}

type RotateCertificateRequest_FinalizeRotation 

type RotateCertificateRequest_FinalizeRotation struct {
	FinalizeRotation *FinalizeRequest `protobuf:"bytes,5,opt,name=finalize_rotation,json=finalizeRotation,proto3,oneof"`
}

type RotateCertificateRequest_GenerateCsr 

type RotateCertificateRequest_GenerateCsr struct {
	GenerateCsr *GenerateCSRRequest `protobuf:"bytes,3,opt,name=generate_csr,json=generateCsr,proto3,oneof"`
}

type RotateCertificateResponse 

type RotateCertificateResponse struct {

	// Types that are assignable to RotateResponse:
	//	*RotateCertificateResponse_GeneratedCsr
	//	*RotateCertificateResponse_Certificates
	RotateResponse isRotateCertificateResponse_RotateResponse `protobuf_oneof:"rotate_response"`
	// contains filtered or unexported fields
}

func (*RotateCertificateResponse) Descriptor deprecated 

func (*RotateCertificateResponse) Descriptor() ([]byte, []int)

Deprecated: Use RotateCertificateResponse.ProtoReflect.Descriptor instead.

func (*RotateCertificateResponse) GetCertificates 

func (x *RotateCertificateResponse) GetCertificates() *UploadResponse

func (*RotateCertificateResponse) GetGeneratedCsr 

func (x *RotateCertificateResponse) GetGeneratedCsr() *GenerateCSRResponse

func (*RotateCertificateResponse) GetRotateResponse 

func (m *RotateCertificateResponse) GetRotateResponse() isRotateCertificateResponse_RotateResponse

func (*RotateCertificateResponse) ProtoMessage 

func (*RotateCertificateResponse) ProtoMessage()

func (*RotateCertificateResponse) ProtoReflect 

func (x *RotateCertificateResponse) ProtoReflect() protoreflect.Message

func (*RotateCertificateResponse) Reset 

func (x *RotateCertificateResponse) Reset()

func (*RotateCertificateResponse) String 

func (x *RotateCertificateResponse) String() string

type RotateCertificateResponse_Certificates 

type RotateCertificateResponse_Certificates struct {
	Certificates *UploadResponse `protobuf:"bytes,2,opt,name=certificates,proto3,oneof"`
}

type RotateCertificateResponse_GeneratedCsr 

type RotateCertificateResponse_GeneratedCsr struct {
	GeneratedCsr *GenerateCSRResponse `protobuf:"bytes,1,opt,name=generated_csr,json=generatedCsr,proto3,oneof"`
}

type UnimplementedCertzServer 

type UnimplementedCertzServer struct {
}

UnimplementedCertzServer must be embedded to have forward compatible implementations.

func (UnimplementedCertzServer) AddProfile 

func (UnimplementedCertzServer) AddProfile(context.Context, *AddProfileRequest) (*AddProfileResponse, error)

func (UnimplementedCertzServer) CanGenerateCSR 

func (UnimplementedCertzServer) CanGenerateCSR(context.Context, *CanGenerateCSRRequest) (*CanGenerateCSRResponse, error)

func (UnimplementedCertzServer) DeleteProfile 

func (UnimplementedCertzServer) DeleteProfile(context.Context, *DeleteProfileRequest) (*DeleteProfileResponse, error)

func (UnimplementedCertzServer) GetProfileList 

func (UnimplementedCertzServer) GetProfileList(context.Context, *GetProfileListRequest) (*GetProfileListResponse, error)

func (UnimplementedCertzServer) Rotate 

func (UnimplementedCertzServer) Rotate(Certz_RotateServer) error

type UnsafeCertzServer 

type UnsafeCertzServer interface {
	// contains filtered or unexported methods
}

UnsafeCertzServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to CertzServer will result in compilation errors.

type UploadRequest 

type UploadRequest struct {
	Entities []*Entity `protobuf:"bytes,1,rep,name=entities,proto3" json:"entities,omitempty"`
	// contains filtered or unexported fields
}

func (*UploadRequest) Descriptor deprecated 

func (*UploadRequest) Descriptor() ([]byte, []int)

Deprecated: Use UploadRequest.ProtoReflect.Descriptor instead.

func (*UploadRequest) GetEntities 

func (x *UploadRequest) GetEntities() []*Entity

func (*UploadRequest) ProtoMessage 

func (*UploadRequest) ProtoMessage()

func (*UploadRequest) ProtoReflect 

func (x *UploadRequest) ProtoReflect() protoreflect.Message

func (*UploadRequest) Reset 

func (x *UploadRequest) Reset()

func (*UploadRequest) String 

func (x *UploadRequest) String() string

type UploadResponse 

type UploadResponse struct {
	// contains filtered or unexported fields
}

func (*UploadResponse) Descriptor deprecated 

func (*UploadResponse) Descriptor() ([]byte, []int)

Deprecated: Use UploadResponse.ProtoReflect.Descriptor instead.

func (*UploadResponse) ProtoMessage 

func (*UploadResponse) ProtoMessage()

func (*UploadResponse) ProtoReflect 

func (x *UploadResponse) ProtoReflect() protoreflect.Message

func (*UploadResponse) Reset 

func (x *UploadResponse) Reset()

func (*UploadResponse) String 

func (x *UploadResponse) String() string

type V3ExtensionSAN 

type V3ExtensionSAN struct {
	Dns    []string `protobuf:"bytes,1,rep,name=dns,proto3" json:"dns,omitempty"`
	Emails []string `protobuf:"bytes,2,rep,name=emails,proto3" json:"emails,omitempty"`
	Ips    []string `protobuf:"bytes,3,rep,name=ips,proto3" json:"ips,omitempty"`
	Uris   []string `protobuf:"bytes,4,rep,name=uris,proto3" json:"uris,omitempty"`
	// contains filtered or unexported fields
}

func (*V3ExtensionSAN) Descriptor deprecated 

func (*V3ExtensionSAN) Descriptor() ([]byte, []int)

Deprecated: Use V3ExtensionSAN.ProtoReflect.Descriptor instead.

func (*V3ExtensionSAN) GetDns 

func (x *V3ExtensionSAN) GetDns() []string

func (*V3ExtensionSAN) GetEmails 

func (x *V3ExtensionSAN) GetEmails() []string

func (*V3ExtensionSAN) GetIps 

func (x *V3ExtensionSAN) GetIps() []string

func (*V3ExtensionSAN) GetUris 

func (x *V3ExtensionSAN) GetUris() []string

func (*V3ExtensionSAN) ProtoMessage 

func (*V3ExtensionSAN) ProtoMessage()

func (*V3ExtensionSAN) ProtoReflect 

func (x *V3ExtensionSAN) ProtoReflect() protoreflect.Message

func (*V3ExtensionSAN) Reset 

func (x *V3ExtensionSAN) Reset()

func (*V3ExtensionSAN) String 

func (x *V3ExtensionSAN) String() string

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.