tls

Documentation

Index

• Constants
• func DefaultDriver() string
• func Drivers() []string
• func FileCertificateBuilder(settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)
• func MakeCertificate(driver string, settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)
• func TpmCertificateBuilder(settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)
• type CertStrategyConfig
• type CertificateBuilder

Constants

const (
	TpmCertDriverName           = "tpm"
	TpmJSONRPCSocket            = "socket"
	TpmJSONRPCPath              = "path"
	TpmDeviceCertName           = "device-cert-name"
	TpmPrivateKeyName           = "private-key-name"
	TpmCertRenewalQueryDuration = "cert-renewal-query-duration"
)

cert strategy options

const FileCertDriverCertKey = "cert"

FileCertDriverCertKey const for "cert"

const FileCertDriverKeyKey = "key"

FileCertDriverKeyKey const for "key"

const FileCertDriverName = "file"

FileCertDriverName const for "file"

Functions

func DefaultDriver

func DefaultDriver() string

DefaultDriver returns default cert driver (FileCertDriverName)

func Drivers

func Drivers() []string

Drivers for certificate builder

func FileCertificateBuilder

func FileCertificateBuilder(settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)

FileCertificateBuilder reads certificates to a certificate chain

func MakeCertificate

func MakeCertificate(driver string, settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)

MakeCertificate creates certificates with given certificate strategy

func TpmCertificateBuilder

func TpmCertificateBuilder(settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)

TpmCertificateBuilder builds a certificate chain using a TPM

Types

type CertStrategyConfig

type CertStrategyConfig map[string]string

CertStrategyConfig map / string/string key-value pair storage

type CertificateBuilder

type CertificateBuilder func(settings CertStrategyConfig) (*tls.Certificate, <-chan *tls.Certificate, error)

CertificateBuilder function prototype