tls

Documentation

Index

• Constants
• Variables
• func ProvisionWildcardCert(req router.Request, resp router.Response, domain, token string) error
• func RenewCert(req router.Request, resp router.Response) error
• func RequireSecretTypeTLS(h router.Handler) router.Handler
• type ACMEDNS01ChallengeProvider
  • func NewACMEDNS01ChallengeProvider(endpoint, domain, token string) *ACMEDNS01ChallengeProvider
  • func (d *ACMEDNS01ChallengeProvider) CleanUp(domain, token, keyAuth string) error
  • func (d *ACMEDNS01ChallengeProvider) Present(domain, token, keyAuth string) error
  • func (d *ACMEDNS01ChallengeProvider) Timeout() (timeout, interval time.Duration)
• type DNSClient
  • func NewDNSClient(endpoint, domain, token string) DNSClient
  • func (d *DNSClient) DeleteDNSRecord(domain string) error
  • func (d *DNSClient) SetTXTRecord(domain, text string) error
• type LEUser
  • func (u *LEUser) GetEmail() string
  • func (u *LEUser) GetPrivateKey() crypto.PrivateKey
  • func (u *LEUser) GetRegistration() *registration.Resource

Constants

const (
	LetsEncryptURLStaging    = "https://acme-staging-v02.api.letsencrypt.org/directory"
	LetsEncryptURLProduction = "https://acme-v02.api.letsencrypt.org/directory"
)

const (
	AuthorizationHeader = "Authorization"
	ContentTypeHeader   = "Content-Type"
	ContentTypeJSON     = "application/json"
)

Variables

var (
	CertificatesRequestLock         = &sync.Mutex{}
	CertificateRequests             = map[string]any{}
	ErrCertificateRequestInProgress = errors.New("certificate request in progress")
)

Functions

func ProvisionWildcardCert

func ProvisionWildcardCert(req router.Request, resp router.Response, domain, token string) error

ProvisionWildcardCert provisions a Let's Encrypt wildcard certificate for *.<domain>.oss-acorn.io

func RenewCert

func RenewCert(req router.Request, resp router.Response) error

RenewCert handles the renewal of existing TLS certificates

func RequireSecretTypeTLS

func RequireSecretTypeTLS(h router.Handler) router.Handler

RequireSecretTypeTLS is a middleware that ensures that we only act on TLS-Type secrets

Types

type ACMEDNS01ChallengeProvider

type ACMEDNS01ChallengeProvider struct {
	// contains filtered or unexported fields
}

func NewACMEDNS01ChallengeProvider

func NewACMEDNS01ChallengeProvider(endpoint, domain, token string) *ACMEDNS01ChallengeProvider

func (*ACMEDNS01ChallengeProvider) CleanUp

func (d *ACMEDNS01ChallengeProvider) CleanUp(domain, token, keyAuth string) error

func (*ACMEDNS01ChallengeProvider) Present

func (d *ACMEDNS01ChallengeProvider) Present(domain, token, keyAuth string) error

func (*ACMEDNS01ChallengeProvider) Timeout

func (d *ACMEDNS01ChallengeProvider) Timeout() (timeout, interval time.Duration)

type DNSClient

type DNSClient struct {
	// contains filtered or unexported fields
}

func NewDNSClient

func NewDNSClient(endpoint, domain, token string) DNSClient

func (*DNSClient) DeleteDNSRecord

func (d *DNSClient) DeleteDNSRecord(domain string) error

func (*DNSClient) SetTXTRecord

func (d *DNSClient) SetTXTRecord(domain, text string) error

type LEUser

type LEUser struct {
	// contains filtered or unexported fields
}

func (*LEUser) GetEmail

func (u *LEUser) GetEmail() string

func (*LEUser) GetPrivateKey

func (u *LEUser) GetPrivateKey() crypto.PrivateKey

func (*LEUser) GetRegistration

func (u *LEUser) GetRegistration() *registration.Resource