cert

Documentation

Index

• func DecodeCertificate(raw []byte) (cert *x509.Certificate, err error)
• func DecodeKey(raw []byte) (parsedKey []byte, err error)
• func EnsureSecretPassJKS(secret *corev1.Secret) (injected *corev1.Secret, err error)
• func GenerateJKS(certs []*x509.Certificate, privateKey []byte) (out, passw []byte, err error)
• func GenerateJKSFromByte(certByte []byte, privateKey []byte, caCert []byte) (out, passw []byte, err error)
• func GeneratePass(length int) (passw []byte)
• func GeneratePrivateKeyInPemFormat() ([]byte, error)
• func GenerateSigningRequestInPemFormat(priv *rsa.PrivateKey, commonName string, organization []string) ([]byte, error)
• func GenerateTestCert() (cert, key []byte, expectedDn string, err error)
• func GetCertBundle(certContainers []*CertificateContainer) []*x509.Certificate
• type CertificateContainer
  • func ParseCertificates(data []byte) ([]*CertificateContainer, error)
  • func (c CertificateContainer) ToPEM() []byte

Functions

func DecodeCertificate

func DecodeCertificate(raw []byte) (cert *x509.Certificate, err error)

DecodeCertificate returns an x509.Certificate for a PEM encoded certificate

func DecodeKey

func DecodeKey(raw []byte) (parsedKey []byte, err error)

DecodeKey will take a PEM encoded Private Key and convert to raw der bytes

func EnsureSecretPassJKS

func EnsureSecretPassJKS(secret *corev1.Secret) (injected *corev1.Secret, err error)

EnsureSecretPassJKS ensures a JKS password is present in a certificate secret

func GenerateJKS

func GenerateJKS(certs []*x509.Certificate, privateKey []byte) (out, passw []byte, err error)

GenerateJKS creates a JKS with a random password from a client cert/key combination

func GenerateJKSFromByte

func GenerateJKSFromByte(certByte []byte, privateKey []byte, caCert []byte) (out, passw []byte, err error)

func GeneratePass

func GeneratePass(length int) (passw []byte)

GeneratePass generates a random password

func GeneratePrivateKeyInPemFormat

func GeneratePrivateKeyInPemFormat() ([]byte, error)

GeneratePrivateKeyInPemFormat is used to generate a private key in a pem format

func GenerateSigningRequestInPemFormat

func GenerateSigningRequestInPemFormat(priv *rsa.PrivateKey, commonName string, organization []string) ([]byte, error)

GenerateSigningRequestInPemFormat is used to generate a signing request in a pem format

func GenerateTestCert

func GenerateTestCert() (cert, key []byte, expectedDn string, err error)

GenerateTestCert is used from unit tests for generating certificates

func GetCertBundle

func GetCertBundle(certContainers []*CertificateContainer) []*x509.Certificate

Types

type CertificateContainer

type CertificateContainer struct {
	// Certificate
	Certificate *x509.Certificate
	// PEM holds the certificate in PEM format
	PEM *pem.Block
}

func ParseCertificates

func ParseCertificates(data []byte) ([]*CertificateContainer, error)

func (CertificateContainer) ToPEM

func (c CertificateContainer) ToPEM() []byte