letsencrypt

type CertInfo ¶

type CertInfo struct {
	Issuer    string `json:"issuer"`
	NotBefore string `json:"not_before"`
	NotAfter  string `json:"not_after"`
	Serial    string `json:"serial"`
	Expired   string `json:"expired"`
	IsMissing string `json:"is_missing"`
}

CertInfo is a single LE cert's metadata as returned by list_all. Per-container info is keyed by container name in the outer Return map of ListResponse.

String-typed boolean fields (Expired, IsMissing) reflect the API's actual response — values arrive as strings ("0"/"1") rather than typed bools.

type Client ¶

type Client struct {
	// contains filtered or unexported fields
}

Client is a Service for Cloud Container Let's Encrypt management.

func New(c *api.Client) *Client

func (s *Client) Create(ctx context.Context, request CreateRequest) (response JobResponse, err error)

func (s *Client) Delete(ctx context.Context, request DeleteRequest) (response JobResponse, err error)

func (s *Client) List(ctx context.Context, request ListRequest) (response ListResponse, err error)

func (s *Client) Renew(ctx context.Context, request RenewRequest) (response JobResponse, err error)

func (s *Client) Revoke(ctx context.Context, request RevokeRequest) (response JobResponse, err error)

type CreateRequest ¶

type CreateRequest struct {
	ServerName string `url:"server"`
	Name       string `url:"name"`
}

CreateRequest queues an LE-cert issuance for the named stack. HTTP-01 validation runs against the stack's nginx-proxy vhost; the stack must be reachable on port 80 at its label hostname for the challenge to succeed.

type DeleteRequest ¶

type DeleteRequest struct {
	ServerName string `url:"server"`
	Name       string `url:"name"`
}

DeleteRequest removes the LE cert for the named stack.

type JobResponse ¶

type JobResponse struct {
	Return struct {
		models.Job `json:"job"`
	} `json:"return"`
	models.APIResponse
}

JobResponse is the shared response shape for the asynchronous write operations: Create, Delete, Renew, Revoke. Each queues a scheduler job; the job id is returned for tracking.

type ListRequest ¶

type ListRequest struct {
	ServerName string   `url:"server"`
	StackName  string   `url:"name"`
	Containers []string `url:"containers,omitempty"`
}

ListRequest identifies a stack on a CCS whose Let's Encrypt certs to list. ServerName is the CCS name (the unprefixed "server" parameter that cloud/stack/* uses, not "server_name"). StackName is the stack's name within that server. Containers is an optional filter restricting the result to specific containers within the stack.

Both ServerName and StackName are required by the API; omitting the stack name returns the API error "The stack name is missing.".

type ListResponse ¶

type ListResponse struct {
	Return map[string]CertInfo `json:"return"`
	models.APIResponse
}

ListResponse represents the response from list_all. Return is a map keyed by container name (within the queried stack) to that container's cert metadata. A container with no LE cert simply doesn't appear in the map.

func (r *ListResponse) UnmarshalJSON(data []byte) error

type RenewRequest ¶

type RenewRequest struct {
	ServerName string `url:"server"`
	Name       string `url:"name"`
}

RenewRequest forces an early renewal of the LE cert for the named stack. Normally the companion auto-renews on schedule; use this for out-of-band refresh.

type RevokeRequest ¶

type RevokeRequest struct {
	ServerName string `url:"server"`
	Name       string `url:"name"`
}

RevokeRequest revokes the LE cert for the named stack at the CA. Distinct from Delete: revocation is a CA-side action that invalidates the cert across the public PKI.