ca

Sep 13, 2019

Changes in this version

+ type ACMEClient struct

+ Key *jose.JSONWebKey

+ func NewACMEClient(endpoint string, contact []string, opts ...ClientOption) (*ACMEClient, error)

+ func (c *ACMEClient) FinalizeOrder(url string, csr *x509.CertificateRequest) error

+ func (c *ACMEClient) GetAccountOrders() ([]string, error)

+ func (c *ACMEClient) GetAuthz(url string) (*acme.Authz, error)

+ func (c *ACMEClient) GetCertificate(url string) (*x509.Certificate, []*x509.Certificate, error)

+ func (c *ACMEClient) GetChallenge(url string) (*acme.Challenge, error)

+ func (c *ACMEClient) GetDirectory() (*acme.Directory, error)

+ func (c *ACMEClient) GetNonce() (string, error)

+ func (c *ACMEClient) GetOrder(url string) (*acme.Order, error)

+ func (c *ACMEClient) NewOrder(payload []byte) (*acme.Order, error)

+ func (c *ACMEClient) ValidateChallenge(url string) error

Sep 9, 2019

Changes in this version

type Client

+ func (c *Client) SignSSH(req *api.SignSSHRequest) (*api.SignSSHResponse, error)

Aug 29, 2019

Changes in this version

type Client

+ func (c *Client) RootFingerprint() (string, error)

type ClientOption

+ func WithCABundle(bundle []byte) ClientOption

type Option

+ func WithDatabase(db db.AuthDB) Option

type Provisioner

+ func (p *Provisioner) SetFingerprint(sum string)

Apr 30, 2019

Changes in this version

+ func StopHandler(servers ...Stopper)

type Client

+ func (c *Client) Revoke(req *api.RevokeRequest, tr http.RoundTripper) (*api.RevokeResponse, error)

+ func (c *Client) SetTransport(tr http.RoundTripper)

+ type Provisioner struct

+ func NewProvisioner(name, kid, caURL, caRoot string, password []byte) (*Provisioner, error)

+ func (p *Provisioner) Kid() string

+ func (p *Provisioner) Name() string

+ func (p *Provisioner) Token(subject string) (string, error)

+ type Stopper interface

+ Stop func() error

Feb 12, 2019

Changes in this version

+ func BootstrapListener(ctx context.Context, token string, inner net.Listener, options ...TLSOption) (net.Listener, error)

type TLSOptionCtx

+ Sign *api.SignResponse

Jan 15, 2019

Changes in this version

type Client

+ func (c *Client) Federation() (*api.FederationResponse, error)

+ func (c *Client) Roots() (*api.RootsResponse, error)

type TLSOption

+ func AddFederationToCAs() TLSOption

+ func AddFederationToClientCAs() TLSOption

+ func AddFederationToRootCAs() TLSOption

+ func AddRootsToCAs() TLSOption

+ func AddRootsToClientCAs() TLSOption

+ func AddRootsToRootCAs() TLSOption

+ type TLSOptionCtx struct

+ Client *Client

+ Config *tls.Config

+ OnRenewFunc []TLSOption

Nov 30, 2018

Changes in this version

+ func BootstrapClient(ctx context.Context, token string, options ...TLSOption) (*http.Client, error)

+ func BootstrapServer(ctx context.Context, token string, base *http.Server, options ...TLSOption) (*http.Server, error)

+ func Certificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func CreateSignRequest(ott string) (*api.SignRequest, crypto.PrivateKey, error)

+ func IntermediateCertificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func RootCertificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func StopReloaderHandler(servers ...StopReloader)

+ func TLSCertificate(sign *api.SignResponse, pk crypto.PrivateKey) (*tls.Certificate, error)

+ func WithRenewBefore(b time.Duration) func(r *TLSRenewer) error

+ func WithRenewJitter(j time.Duration) func(r *TLSRenewer) error

+ type CA struct

+ func New(config *authority.Config, opts ...Option) (*CA, error)

+ func (ca *CA) Init(config *authority.Config) (*CA, error)

+ func (ca *CA) Reload() error

+ func (ca *CA) Run() error

+ func (ca *CA) Stop() error

+ type Client struct

+ func Bootstrap(token string) (*Client, error)

+ func NewClient(endpoint string, opts ...ClientOption) (*Client, error)

+ func (c *Client) GetClientTLSConfig(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*tls.Config, error)

+ func (c *Client) GetServerTLSConfig(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*tls.Config, error)

+ func (c *Client) Health() (*api.HealthResponse, error)

+ func (c *Client) ProvisionerKey(kid string) (*api.ProvisionerKeyResponse, error)

+ func (c *Client) Provisioners(opts ...ProvisionerOption) (*api.ProvisionersResponse, error)

+ func (c *Client) Renew(tr http.RoundTripper) (*api.SignResponse, error)

+ func (c *Client) Root(sha256Sum string) (*api.RootResponse, error)

+ func (c *Client) Sign(req *api.SignRequest) (*api.SignResponse, error)

+ func (c *Client) Transport(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*http.Transport, error)

+ type ClientOption func(o *clientOptions) error

+ func WithRootFile(filename string) ClientOption

+ func WithRootSHA256(sum string) ClientOption

+ func WithTransport(tr http.RoundTripper) ClientOption

+ type Option func(o *options)

+ func WithConfigFile(name string) Option

+ func WithPassword(password []byte) Option

+ type ProvisionerOption func(o *provisionerOptions) error

+ func WithProvisionerCursor(cursor string) ProvisionerOption

+ func WithProvisionerLimit(limit int) ProvisionerOption

+ type RenewFunc func() (*tls.Certificate, error)

+ type StopReloader interface

+ Reload func() error

+ Stop func() error

+ type TLSOption func(c *tls.Config) error

+ func AddClientCA(cert *x509.Certificate) TLSOption

+ func AddRootCA(cert *x509.Certificate) TLSOption

+ func RequireAndVerifyClientCert() TLSOption

+ func VerifyClientCertIfGiven() TLSOption

+ type TLSRenewer struct

+ RenewCertificate RenewFunc

+ func NewTLSRenewer(cert *tls.Certificate, fn RenewFunc, opts ...tlsRenewerOptions) (*TLSRenewer, error)

+ func (r *TLSRenewer) GetCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) GetCertificateForCA(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) GetClientCertificate(*tls.CertificateRequestInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) Run()

+ func (r *TLSRenewer) RunContext(ctx context.Context)

+ func (r *TLSRenewer) Stop() bool