fpca

Documentation

Index

• type FPCA
  • func (fpca *FPCA) SignClientCert(CN string, pubkey *rsa.PublicKey) ([]byte, error)

Types

type FPCA

type FPCA struct {
	Namespace string            // the name space that we are signing. I.E. <cn>@@example.com. Specifiy the part after the @@."
	CaCert    *x509.Certificate // The SubCa that signs the client certificates.
	CaPrivKey *rsa.PrivateKey   // The private key of the SubCA that does the (actual) signing.
}

The First Party Certificate Authority signs

func (*FPCA) SignClientCert

func (fpca *FPCA) SignClientCert(CN string, pubkey *rsa.PublicKey) ([]byte, error)

SignUpPubkey signs a public key, cn combo with our CAPrivKey and returns the raw DER-encoded bytes. We sign anything. Caller is responsible for <cn>@@<namespace> validation.