goodkey

Documentation

Index

• type KeyPolicy
  • func NewKeyPolicy() KeyPolicy
  • func (policy *KeyPolicy) GoodKey(key crypto.PublicKey) error

Types

type KeyPolicy

type KeyPolicy struct {
	AllowRSA           bool // Whether RSA keys should be allowed.
	AllowECDSANISTP256 bool // Whether ECDSA NISTP256 keys should be allowed.
	AllowECDSANISTP384 bool // Whether ECDSA NISTP384 keys should be allowed.
}

KeyPolicy determines which types of key may be used with various boulder operations.

func NewKeyPolicy

func NewKeyPolicy() KeyPolicy

NewKeyPolicy returns a KeyPolicy that allows RSA, ECDSA256 and ECDSA384.

func (*KeyPolicy) GoodKey

func (policy *KeyPolicy) GoodKey(key crypto.PublicKey) error

GoodKey returns true if the key is acceptable for both TLS use and account key use (our requirements are the same for either one), according to basic strength and algorithm checking. TODO: Support JsonWebKeys once go-jose migration is done.