Documentation
¶
Index ¶
- func GenSignerCert(dir string) (certPath, keyPath string, cert *x509.Certificate, err error)
- func GenSignerCertWithCapabilities(dir string, caps []pki.Capability) (certPath, keyPath string, cert *x509.Certificate, err error)
- func GenSignerCertWithGrant(dir string, caps, constraints []pki.Capability) (certPath, keyPath string, cert *x509.Certificate, err error)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func GenSignerCert ¶
func GenSignerCert(dir string) (certPath, keyPath string, cert *x509.Certificate, err error)
GenSignerCert creates a self-signed signer certificate and key for rule signing (PKCS#7). Returns PEM file paths and the parsed cert. The certificate carries no AIC extension (convenience default).
func GenSignerCertWithCapabilities ¶
func GenSignerCertWithCapabilities(dir string, caps []pki.Capability) (certPath, keyPath string, cert *x509.Certificate, err error)
GenSignerCertWithCapabilities creates a signer certificate that carries an AIC extension declaring the given capabilities. ruleexec requires a rule's capability to be covered by the signer's AIC grant, so tests (and real deployments) use this variant to publish rules under a bounded authority.
func GenSignerCertWithGrant ¶
func GenSignerCertWithGrant(dir string, caps, constraints []pki.Capability) (certPath, keyPath string, cert *x509.Certificate, err error)
GenSignerCertWithGrant also declares the signer's authorization constraints, which ruleexec requires for any constraint a rule declares.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.