pki

Documentation

Index

• func CertPoolFromPEM(caPEM []byte) (*x509.CertPool, error)
• func Fingerprint(cert *x509.Certificate) string
• func FingerprintPEM(certPEM []byte) (string, error)
• func ValidateFingerprint(s string) error
• func WritePEM(path string, data []byte) error
• type CA
  • func CreateCA() (*CA, error)
  • func LoadCA(certPEM, keyPEM []byte) (*CA, error)
  • func (ca *CA) CertPEM() []byte
  • func (ca *CA) IssueClient(name string) ([]byte, []byte, error)
  • func (ca *CA) IssueServer(host string) ([]byte, []byte, error)
  • func (ca *CA) KeyPEM() []byte

Functions

func CertPoolFromPEM

func CertPoolFromPEM(caPEM []byte) (*x509.CertPool, error)

func Fingerprint

func Fingerprint(cert *x509.Certificate) string

func FingerprintPEM

func FingerprintPEM(certPEM []byte) (string, error)

FingerprintPEM parses a PEM certificate and returns its fingerprint.

func ValidateFingerprint

func ValidateFingerprint(s string) error

ValidateFingerprint checks that s is a well-formed certificate fingerprint: the "SHA256:" prefix followed by base64 of exactly 32 bytes, matching the form Fingerprint produces.

func WritePEM

func WritePEM(path string, data []byte) error

Types

type CA

type CA struct {
	Cert *x509.Certificate
	Key  ed25519.PrivateKey
	// contains filtered or unexported fields
}

func CreateCA

func CreateCA() (*CA, error)

func LoadCA

func LoadCA(certPEM, keyPEM []byte) (*CA, error)

func (*CA) CertPEM

func (ca *CA) CertPEM() []byte

func (*CA) IssueClient

func (ca *CA) IssueClient(name string) ([]byte, []byte, error)

func (*CA) IssueServer

func (ca *CA) IssueServer(host string) ([]byte, []byte, error)

func (*CA) KeyPEM

func (ca *CA) KeyPEM() []byte