dnsid

package module

Go to main page

Versions in this module

v0

v0.37.2

Sep 30, 2026

v0.37.1

Sep 29, 2026

v0.37.0

Sep 28, 2026

v0.36.1

Sep 25, 2026

v0.36.0

Sep 24, 2026

Changes in this version

type Config

+ func (c Config) Validate() error

v0.35.0

Sep 23, 2026

Changes in this version

type Config

+ func ConfigFromEnv() (Config, error)

type TransportConfig

+ PrivateAddressHosts []string

+ func (c TransportConfig) IsZero() bool

v0.34.0

Sep 22, 2026

Changes in this version

type TransportConfig

+ AllowPrivateNetwork bool

v0.33.3

Sep 22, 2026

v0.33.2

Sep 21, 2026

Changes in this version

+ const DefaultRegistryURL

type HTTPRegistryClient

+ func NewRegistryClientFromEnv(opts ...RegistryClientOption) (*HTTPRegistryClient, error)

v0.33.1

Sep 15, 2026

Changes in this version

+ const AgentStateActive

+ const AgentStatePending

+ const AgentStateProvisioning

+ const AgentStateRetired

+ const AgentStateRevoked

+ const AgentStateVerifying

+ const DefaultPublishProfile

+ const DefaultVerificationTimeout

+ const RegistryStatusCancelled

+ const RegistryStatusError

+ const RegistryStatusFailed

+ const RegistryStatusReady

+ const RegistryStatusRejected

+ var ErrCounterpartyNotAccepted = &VerificationError

+ var ErrInvalidClaims = &VerificationError

+ var ErrInvalidSignature = &VerificationError

+ var ErrKeyStoreDurability = errors.New("dnsid: key store published but durability uncertain")

+ var ErrLifetimeTooLong = &VerificationError

+ var ErrMalformedToken = &VerificationError

+ var ErrOwnerSignatureInvalidJWKS = errors.New("dnsid: signature verification failed")

+ var ErrOwnerSignatureMalformed = errors.New("dnsid: signature verification failed")

+ var ErrOwnerSignatureNoMatchingKey = errors.New("dnsid: signature verification failed")

+ var ErrTokenExpired = &VerificationError

+ var ErrTokenNotYetValid = &VerificationError

+ var ValidKeyAgeValues = map[string]bool

+ var Version = resolveVersion()

+ func CreateDnsidHTTPClient(transportConfig TransportConfig) (*http.Client, error)

+ func MissingRequiredField(rec *TXTRecord) string

+ func NormalizeFQDN(input string) (string, error)

+ func ParseJWKSet(data []byte) (jwk.Set, error)

+ func ParseLogRef(lr string) (method, entryRef string, err error)

+ func RegistrantDomain(domain string) string

+ func SafeDialerTransport() *http.Transport

+ func SignLogEventWithKey(event dnsidlog.LogEvent, role LogSignerRole, kp KeyProvider, ...) (dnsidlog.LogEvent, error)

+ func Tags(rec *TXTRecord) map[string]string

+ func VerificationContext(ctx context.Context) (context.Context, context.CancelFunc)

+ type AgentDetail struct

+ ChainRecordStatus string

+ Challenge string

+ ChallengeExpiresAt *time.Time

+ CreatedAt time.Time

+ DNSPublished bool

+ DNSPublishedAt *time.Time

+ Domain string

+ DomainDisplay string

+ Environment string

+ Error *AgentError

+ ID string

+ IdentityRecordExpiresAt *time.Time

+ IdentityRecordExpiring *bool

+ Managed string

+ Name string

+ ProtocolStatus *AgentStatus

+ PublicationConfig PublicationConfig

+ RevocationReason string

+ RevokedAt *time.Time

+ ServerStatus string

+ Status string

+ StatusURL string

+ TransactionID string

+ UpdatedAt time.Time

+ func WaitForRegistryStatus(ctx context.Context, client RegistryStatusReader, fqdn string, ...) (*AgentDetail, error)

+ type AgentError struct

+ Code string

+ Detail string

+ Remediation string

+ Title string

+ type AgentEvent struct

+ ActorID *string

+ AgentID string

+ CreatedAt time.Time

+ Details map[string]any

+ EventType string

+ ID string

+ type AgentListItem struct

+ CreatedAt time.Time

+ Domain string

+ DomainDisplay string

+ Environment string

+ ID string

+ Status string

+ UpdatedAt time.Time

+ type AgentListResponse struct

+ Agents []AgentListItem

+ NextCursor string

+ type AgentRegistration struct

+ DNSPublished bool

+ Domain string

+ OIDCIssuerURL string

+ ProtocolStatus *AgentStatus

+ PublicationAuthority PublicationAuthority

+ Raw json.RawMessage

+ RegistryStatus string

+ RegistryURL string

+ type AgentRegistrationInput struct

+ Domain string

+ Environment string

+ Managed bool

+ Metadata map[string]any

+ PublicKeyJWK any

+ type AgentState = dnsidlog.AgentState

+ func AgentStates() []AgentState

+ func ParseAgentState(s string) (AgentState, error)

+ type AgentStatus struct

+ LastTransitionAt time.Time

+ RevocationReason string

+ State AgentState

+ func (s *AgentStatus) Validate() error

+ type ArgumentError = sdkerrors.ArgumentError

+ func NewArgumentError(msg string, cause error) *ArgumentError

+ type CanonicalRecordContentResponse struct

+ Canonical string

+ Raw json.RawMessage

+ SigningKid string

+ type ChallengeRequest struct

+ Nonce string

+ Signature string

+ type Config struct

+ Identity *IdentityConfig

+ Transport TransportConfig

+ Verification VerificationConfig

+ type CreateAgentRequest struct

+ CapabilitiesURL string

+ Domain string

+ Environment string

+ Managed bool

+ Name string

+ PublicKey any

+ ZoneID string

+ type CreateAgentResponse struct

+ Domain string

+ DomainDisplay string

+ ID string

+ Name string

+ OIDCIssuerURL string

+ PublicationConfig PublicationConfig

+ Status string

+ StatusURL string

+ type DNSRecord struct

+ Name string

+ TTL int

+ Type string

+ Value string

+ type DNSResolver interface

+ FetchTXT func(ctx context.Context, name string) ([]TXTRecordRData, DNSSECState, error)

+ type DNSSECMode string

+ const DNSSECModeAuto

+ const DNSSECModeRequired

+ const DNSSECModeValidated

+ type DNSSECState string

+ const DNSSECStateFailed

+ const DNSSECStateUnknown

+ const DNSSECStateUnsigned

+ const DNSSECStateValid

+ type EventListOptions struct

+ Cursor string

+ Limit int

+ type EventListResponse struct

+ Events []AgentEvent

+ NextCursor *string

+ type FetchOptions struct

+ AllowedHost string

+ DomainBoundary bool

+ MaxResponseBytes int64

+ RedirectPolicy RedirectPolicy

+ type HTTPRegistryClient struct

+ func NewRegistryClient(baseURL string, transportConfig ...TransportConfig) (*HTTPRegistryClient, error)

+ func NewRegistryClientWithOptions(baseURL string, opts ...RegistryClientOption) (*HTTPRegistryClient, error)

+ func (c *HTTPRegistryClient) CancelAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) CanonicalRecordContent(ctx context.Context, domain, signingKid string) (*CanonicalRecordContentResponse, error)

+ func (c *HTTPRegistryClient) ConfirmReady(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) CreateAgent(ctx context.Context, req *CreateAgentRequest) (*CreateAgentResponse, error)

+ func (c *HTTPRegistryClient) CreateLiveAgent(ctx context.Context, req *LiveAgentRegistrationInput, idempotencyKey string) (*LiveProvisioningResponse, error)

+ func (c *HTTPRegistryClient) GetAgentEvents(ctx context.Context, fqdn string, opts *EventListOptions) (*EventListResponse, error)

+ func (c *HTTPRegistryClient) GetAgentStatus(ctx context.Context, fqdn string) (*AgentDetail, error)

+ func (c *HTTPRegistryClient) GetIdentityRecord(ctx context.Context, fqdn string, req *IdentityRecordRequest) (*IdentityRecordResponse, error)

+ func (c *HTTPRegistryClient) GetRegistration(ctx context.Context, fqdn string) (*AgentRegistration, error)

+ func (c *HTTPRegistryClient) ListAgents(ctx context.Context, opts *ListAgentsOptions) (*AgentListResponse, error)

+ func (c *HTTPRegistryClient) ListExpiringAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) ListFlaggedAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) ListPendingAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) PrepareIssuance(ctx context.Context, fqdn, idempotencyKey string) (*PreparedRegistryEvent, error)

+ func (c *HTTPRegistryClient) PrepareKeyRotation(ctx context.Context, fqdn string, req *KeyRotationPreparationRequest, ...) (*PreparedRegistryEvent, error)

+ func (c *HTTPRegistryClient) PublishSignature(ctx context.Context, domain, sig string) (*PublishedRecord, error)

+ func (c *HTTPRegistryClient) ReissueLiveProof(ctx context.Context, fqdn string, req *LiveProofReissueRequest) (*LiveProofReissueResponse, error)

+ func (c *HTTPRegistryClient) RejectAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) RetireAgent(ctx context.Context, fqdn string, req *RetireAgentRequest) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) RevokeAgent(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) SetAuthToken(token string) error

+ func (c *HTTPRegistryClient) SubmitChallenge(ctx context.Context, fqdn string, req *ChallengeRequest) error

+ func (c *HTTPRegistryClient) SubmitLiveProof(ctx context.Context, fqdn string, req *LiveProofRequest) (*LiveProofResponse, error)

+ func (c *HTTPRegistryClient) SubmitPreparedEvent(ctx context.Context, fqdn string, entryBytes []byte, idempotencyKey string) (*SubmissionResult, error)

+ func (c *HTTPRegistryClient) SubmitSignature(ctx context.Context, fqdn string, req *SignatureRequest) (*SignatureResponse, error)

+ func (c *HTTPRegistryClient) UnregisterAgent(ctx context.Context, fqdn string) error

+ func (c *HTTPRegistryClient) VerifyAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) VerifyDomainRemote(ctx context.Context, req *VerifyDomainRequest) (*VerifyDomainResponse, error)

+ func (c *HTTPRegistryClient) WaitForStatus(ctx context.Context, fqdn string, targetStatuses []string, ...) (*AgentDetail, error)

+ type HTTPSFetcher interface

+ FetchJSON func(ctx context.Context, rawURL string, opts FetchOptions) (json.RawMessage, *tls.Certificate, error)

+ type IdentityCache struct

+ func NewIdentityCache(_ time.Duration) *IdentityCache

+ func (c *IdentityCache) Evict(domain string)

+ func (c *IdentityCache) Get(domain string) *VerifiedDomain

+ func (c *IdentityCache) Put(vd *VerifiedDomain)

+ type IdentityConfig struct

+ CapabilitiesURL string

+ Domain string

+ EntityKeyURL string

+ GovernanceID string

+ KeyURL string

+ LogRef string

+ MaxKeyAge KeyAge

+ PolicyFlags []PolicyFlag

+ PublishProfile string

+ StatusURL string

+ func (c IdentityConfig) Validate() error

+ type IdentityManager struct

+ func NewIdentityManager(cfg Config, kp KeyProvider, opts ...IdentityManagerOption) (*IdentityManager, error)

+ func NewIdentityManagerFromDnsid(dir string, cfg Config, opts ...IdentityManagerOption) (*IdentityManager, error)

+ func NewVerifier(opts ...IdentityManagerOption) (*IdentityManager, error)

+ func (m *IdentityManager) AwaitRegistryManagedPublication(ctx context.Context, client RegistryRegistrationReader, ...) (*PublishedRecord, error)

+ func (m *IdentityManager) BuildUnsignedTXTRecord() (*TXTRecord, error)

+ func (m *IdentityManager) CanonicalizeLogEvent(event dnsidlog.LogEvent) ([]byte, error)

+ func (m *IdentityManager) CreateTXTRecord() (*TXTRecord, error)

+ func (m *IdentityManager) Domain() string

+ func (m *IdentityManager) EntityKeyURL() string

+ func (m *IdentityManager) EvictDomain(domain string)

+ func (m *IdentityManager) GenerateIssuanceEvent(ctx context.Context) (dnsidlog.LogRef, error)

+ func (m *IdentityManager) GetEntityKeySet() *JWKS

+ func (m *IdentityManager) GetKeySet() *JWKS

+ func (m *IdentityManager) KeyProvider() KeyProvider

+ func (m *IdentityManager) LoadDomainLog(ctx context.Context, vd *VerifiedDomain) (*dnsidlog.DomainLog, error)

+ func (m *IdentityManager) OperationalKeyURL() string

+ func (m *IdentityManager) PublishClientControlledRecord(ctx context.Context, client RegistryClientControlledPublisher) (*PublishedRecord, error)

+ func (m *IdentityManager) RevokeViaRegistry(ctx context.Context, client RegistryRevoker, agentID string, ...) (*LifecycleResponse, error)

+ func (m *IdentityManager) SignAndWriteEvent(ctx context.Context, event dnsidlog.LogEvent) (dnsidlog.LogRef, error)

+ func (m *IdentityManager) SignLogEvent(event dnsidlog.LogEvent, role LogSignerRole) (dnsidlog.LogEvent, error)

+ func (m *IdentityManager) VerifyDomain(ctx context.Context, domain string) (*VerifiedDomain, error)

+ func (m *IdentityManager) VerifyDomainWithOptions(ctx context.Context, domain string, opts VerifyDomainOpts) (*VerifiedDomain, error)

+ func (m *IdentityManager) VerifyLogEvidence(ctx context.Context, vd *VerifiedDomain, at time.Time) (dnsidlog.LoggedStateEvidence, error)

+ func (m *IdentityManager) WriteSignedEvent(ctx context.Context, event dnsidlog.LogEvent) (dnsidlog.LogRef, error)

+ type IdentityManagerOption func(*IdentityManager)

+ func WithDNSResolver(r DNSResolver) IdentityManagerOption

+ func WithEntityKeyProvider(kp KeyProvider) IdentityManagerOption

+ func WithHTTPClient(client *http.Client) IdentityManagerOption

+ func WithHTTPSFetcher(f HTTPSFetcher) IdentityManagerOption

+ func WithIdentityCache(cache *IdentityCache) IdentityManagerOption

+ func WithLogRegistry(r *dnsidlog.LogRegistry) IdentityManagerOption

+ type IdentityRecordRequest struct

+ SigningKid string

+ type IdentityRecordResponse struct

+ CanonicalContent string

+ ExpiresAt string

+ FQDN string

+ SigningKid string

+ Tags map[string]string

+ type IdentityResolver interface

+ VerifyDomain func(ctx context.Context, domain string) (*VerifiedDomain, error)

+ type JWK struct

+ func (k *JWK) Alg() JoseAlg

+ func (k *JWK) Kid() string

+ func (k *JWK) Raw() jwk.Key

+ func (k *JWK) SignatureAlg(profile string) (JoseAlg, error)

+ func (k *JWK) Thumbprint() (string, error)

+ func (k *JWK) Use() string

+ type JWKS struct

+ func NewJWKS(set jwk.Set) *JWKS

+ func ParseJWKS(data []byte) (*JWKS, error)

+ func (j *JWKS) CurrentOperationalSigningKey(profile string) (*JWK, error)

+ func (j *JWKS) CurrentRecordSigningKey(profile string) (*JWK, error)

+ func (j *JWKS) KeyByID(kid string) *JWK

+ func (j *JWKS) Raw() jwk.Set

+ func (j *JWKS) SigningKeys() []*JWK

+ func (j *JWKS) Validate() error

+ func (j *JWKS) ValidateOperational(profile string) error

+ func (j *JWKS) ValidateRecordSigning(profile string) error

+ type JoseAlg string

+ const JoseAlgES256

+ const JoseAlgEdDSA

+ func (a JoseAlg) String() string

+ func (a JoseAlg) Valid() bool

+ type KeyAge string

+ type KeyProvider interface

+ Activate func(kid string) error

+ GenerateKey func(alg JoseAlg) (string, error)

+ JWK func(kid ...string) jwk.Key

+ ListKeyIds func() []string

+ Purge func(kid string) error

+ Sign func(payload []byte) (*KeySignature, error)

+ SignKey func(kid string, payload []byte) (*KeySignature, error)

+ Supersede func(kid string) error

+ type KeyRotationPreparationRequest struct

+ PreviousKeyID string

+ PublicKey any

+ type KeySignature struct

+ Alg JoseAlg

+ Kid string

+ Signature []byte

+ type LifecycleResponse struct

+ ID string

+ Status string

+ StatusNote string

+ type ListAgentsOptions struct

+ Cursor string

+ Limit int

+ type LiveAgentRegistrationInput struct

+ CapabilitiesURL string

+ Environment string

+ Name string

+ PublicKey any

+ type LiveChallengeTranscript struct

+ AgentID string

+ ExpiresAt time.Time

+ FQDN string

+ KeyID string

+ Nonce string

+ OrgID string

+ Protocol string

+ type LiveProofReissueRequest struct

+ PublicKey any

+ RequestID string

+ type LiveProofReissueResponse struct

+ AgentID string

+ Challenge string

+ ChallengeMessage string

+ ChallengeTranscript *LiveChallengeTranscript

+ Domain string

+ RequestID string

+ Status string

+ type LiveProofRequest struct

+ Challenge string

+ PublicKey any

+ RequestID string

+ Signature string

+ type LiveProofResponse struct

+ AgentID string

+ RequestID string

+ Status string

+ type LiveProvisioningResponse struct

+ AgentID string

+ Challenge string

+ ChallengeMessage string

+ ChallengeTranscript *LiveChallengeTranscript

+ Domain string

+ RequestID string

+ Status string

+ type LocalKeyProvider struct

+ func GenerateES256KeyProvider() *LocalKeyProvider

+ func GenerateEd25519KeyProvider() *LocalKeyProvider

+ func LoadOrCreateLocalKeyProvider(path string, alg JoseAlg) (*LocalKeyProvider, error)

+ func NewLocalKeyProvider(path string) (*LocalKeyProvider, error)

+ func (p *LocalKeyProvider) Activate(kid string) error

+ func (p *LocalKeyProvider) GenerateKey(alg JoseAlg) (string, error)

+ func (p *LocalKeyProvider) JWK(kidOpt ...string) jwk.Key

+ func (p *LocalKeyProvider) ListKeyIds() []string

+ func (p *LocalKeyProvider) Purge(kid string) error

+ func (p *LocalKeyProvider) Sign(payload []byte) (*KeySignature, error)

+ func (p *LocalKeyProvider) SignKey(kid string, payload []byte) (*KeySignature, error)

+ func (p *LocalKeyProvider) Supersede(kid string) error

+ type LogEventCanonicalizer interface

+ Canonical func(event dnsidlog.LogEvent) ([]byte, error)

+ type LogSignerRole string

+ const LogSignerEntity

+ const LogSignerNewOperational

+ const LogSignerOperationalCountersignature

+ const LogSignerPreviousOperational

+ func RequiredLogSignatures(event dnsidlog.LogEvent) ([]LogSignerRole, error)

+ type OperationsAgent struct

+ CreatedAt time.Time

+ DaysRemaining *int

+ Domain string

+ DomainDisplay string

+ Environment string

+ Error *AgentError

+ ID string

+ IdentityRecordExpiresAt *string

+ Status string

+ UpdatedAt time.Time

+ type OperationsAgentListResponse struct

+ Agents []OperationsAgent

+ type ParseError = sdkerrors.ParseError

+ func NewParseError(msg string, cause error) *ParseError

+ type PolicyFlag string

+ const PolicyFlagLogCheck

+ const PolicyFlagMTLS

+ type PreparedRegistryEvent struct

+ EntryBytes []byte

+ LogReference string

+ type PublicationAuthority string

+ const PublicationAuthorityClient

+ const PublicationAuthorityRegistry

+ type PublicationConfig struct

+ CapabilitiesURL string

+ EntityKeyURL string

+ GovernanceID string

+ KeyURL string

+ LogRef string

+ MaxKeyAge string

+ PublishProfile string

+ StatusURL string

+ type PublishedRecord struct

+ Domain string

+ OwnerName string

+ ProtocolStatus *AgentStatus

+ PublicationStatus string

+ Raw json.RawMessage

+ TTL int

+ TXTRecord string

+ type RedirectPolicy string

+ const RedirectPolicyHTTPS

+ const RedirectPolicyNone

+ const RedirectPolicySameHost

+ type RegistryAPIError struct

+ Cause error

+ Code string

+ Message string

+ StatusCode int

+ func (e *RegistryAPIError) Error() string

+ func (e *RegistryAPIError) RetrySameEntry() bool

+ func (e *RegistryAPIError) SubmissionState() SubmissionState

+ func (e *RegistryAPIError) Transient() bool

+ func (e *RegistryAPIError) Unwrap() error

+ type RegistryClient interface

+ CancelAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ ConfirmReady func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ CreateAgent func(ctx context.Context, req *CreateAgentRequest) (*CreateAgentResponse, error)

+ CreateLiveAgent func(ctx context.Context, req *LiveAgentRegistrationInput, idempotencyKey string) (*LiveProvisioningResponse, error)

+ GetAgentEvents func(ctx context.Context, fqdn string, opts *EventListOptions) (*EventListResponse, error)

+ GetAgentStatus func(ctx context.Context, fqdn string) (*AgentDetail, error)

+ GetIdentityRecord func(ctx context.Context, fqdn string, req *IdentityRecordRequest) (*IdentityRecordResponse, error)

+ ListAgents func(ctx context.Context, opts *ListAgentsOptions) (*AgentListResponse, error)

+ ListExpiringAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ListFlaggedAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ListPendingAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ReissueLiveProof func(ctx context.Context, fqdn string, req *LiveProofReissueRequest) (*LiveProofReissueResponse, error)

+ RejectAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ RetireAgent func(ctx context.Context, fqdn string, req *RetireAgentRequest) (*LifecycleResponse, error)

+ RevokeAgent func(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ SubmitChallenge func(ctx context.Context, fqdn string, req *ChallengeRequest) error

+ SubmitLiveProof func(ctx context.Context, fqdn string, req *LiveProofRequest) (*LiveProofResponse, error)

+ SubmitSignature func(ctx context.Context, fqdn string, req *SignatureRequest) (*SignatureResponse, error)

+ UnregisterAgent func(ctx context.Context, fqdn string) error

+ VerifyAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ VerifyDomainRemote func(ctx context.Context, req *VerifyDomainRequest) (*VerifyDomainResponse, error)

+ type RegistryClientControlledPublisher interface

+ type RegistryClientOption func(*HTTPRegistryClient)

+ func WithAuthToken(token string) RegistryClientOption

+ func WithInsecureHTTP() RegistryClientOption

+ func WithRegistryHTTPClient(client *http.Client) RegistryClientOption

+ type RegistryConfig struct

+ RegistryURL string

+ type RegistryPreparedEventClient interface

+ PrepareIssuance func(ctx context.Context, fqdn, idempotencyKey string) (*PreparedRegistryEvent, error)

+ PrepareKeyRotation func(ctx context.Context, fqdn string, req *KeyRotationPreparationRequest, ...) (*PreparedRegistryEvent, error)

+ SubmitPreparedEvent func(ctx context.Context, fqdn string, entryBytes []byte, idempotencyKey string) (*SubmissionResult, error)

+ type RegistryPublisher interface

+ CanonicalRecordContent func(ctx context.Context, domain, signingKid string) (*CanonicalRecordContentResponse, error)

+ PublishSignature func(ctx context.Context, domain, sig string) (*PublishedRecord, error)

+ type RegistryRegistrationReader interface

+ GetRegistration func(ctx context.Context, domain string) (*AgentRegistration, error)

+ type RegistryRevocationReason string

+ const RegistryRevocationReasonKeyCompromise

+ const RegistryRevocationReasonOwnerRequest

+ type RegistryRevoker interface

+ RevokeAgent func(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ type RegistryStatusReader interface

+ GetAgentStatus func(ctx context.Context, fqdn string) (*AgentDetail, error)

+ type RegistryWorkflowError struct

+ Cause error

+ Registration *AgentRegistration

+ Status string

+ func (e *RegistryWorkflowError) Error() string

+ func (e *RegistryWorkflowError) Unwrap() error

+ type RetireAgentRequest struct

+ AgentID string

+ type RevokeAgentRequest struct

+ AgentID string

+ Reason RegistryRevocationReason

+ type SDKConformanceMetadata struct

+ KnownDeviations []string

+ LogBindings map[string]string

+ PublishProfile string

+ SpecificationStatus string

+ VerificationProfiles map[string]string

+ func SDKConformance() SDKConformanceMetadata

+ type SignatureRequest struct

+ Signature string

+ type SignatureResponse struct

+ FQDN string

+ Message string

+ Records []DNSRecord

+ Status string

+ ZoneFile string

+ type SubmissionResult struct

+ EntryHash string

+ ErrorCode string

+ Index *uint64

+ KeyID string

+ LogRef string

+ State SubmissionState

+ type SubmissionState string

+ const SubmissionStateAccepted

+ const SubmissionStateIndeterminate

+ const SubmissionStatePending

+ const SubmissionStatePrepared

+ const SubmissionStateRejected

+ const SubmissionStateSubmitting

+ type TXTRecord struct

+ Capabilities string

+ EntityKeyURI string

+ Flags []string

+ GovernanceID string

+ KeyAge string

+ KeyURI string

+ LogRef string

+ Signature string

+ StatusURI string

+ UnknownTags map[string]string

+ Version string

+ func ParseTXTRecord(txt string) (*TXTRecord, error)

+ func ParseUnsignedCanonical(txt string) (*TXTRecord, error)

+ func (r *TXTRecord) Canonical() string

+ func (r *TXTRecord) CanonicalContent() []byte

+ func (r *TXTRecord) KnownTagsCanonical() []byte

+ func (r *TXTRecord) MarshalTXT() (string, error)

+ func (r *TXTRecord) Serialize() string

+ func (r *TXTRecord) Tags() map[string]string

+ func (r *TXTRecord) Validate(identityFQDN string) error

+ func (r *TXTRecord) WithSignature(sig string) *TXTRecord

+ type TXTRecordRData struct

+ TTL time.Duration

+ Value string

+ type TransportConfig struct

+ CABundlePath string

+ DNSServer string

+ type TrustedEntity struct

+ EntityKeyThumbprints []string

+ GovernanceID string

+ type ValidationError struct

+ Cause error

+ Message string

+ func NewValidationError(msg string, cause error) *ValidationError

+ func (e *ValidationError) Error() string

+ func (e *ValidationError) Is(target error) bool

+ func (e *ValidationError) Unwrap() error

+ type VerificationCode string

+ const VerificationCodeAgentNotFound

+ const VerificationCodeAudienceMismatch

+ const VerificationCodeChainContinuity

+ const VerificationCodeCounterpartyNotAccepted

+ const VerificationCodeDNSResolution

+ const VerificationCodeDNSSECFailed

+ const VerificationCodeDuplicateIssuance

+ const VerificationCodeIncompleteStream

+ const VerificationCodeInvalidClaims

+ const VerificationCodeInvalidEvidence

+ const VerificationCodeInvalidMigration

+ const VerificationCodeIssuerMismatch

+ const VerificationCodeJWKSUnavailable

+ const VerificationCodeKeyAgeExceeded

+ const VerificationCodeKeyContinuity

+ const VerificationCodeKeyNotFound

+ const VerificationCodeLifetimeTooLong

+ const VerificationCodeLogError

+ const VerificationCodeMalformedToken

+ const VerificationCodePolicyNotSatisfied

+ const VerificationCodeRecordInvalid

+ const VerificationCodeSignatureInvalid

+ const VerificationCodeStatusNotActive

+ const VerificationCodeStatusUnavailable

+ const VerificationCodeTLSError

+ const VerificationCodeTerminalState

+ const VerificationCodeTokenExpired

+ const VerificationCodeTokenNotYetValid

+ type VerificationConfig struct

+ DNSSECMode DNSSECMode

+ StatusCheckInterval time.Duration

+ TrustedEntities []TrustedEntity

+ type VerificationError struct

+ func NewVerificationError(code VerificationCode, transient bool, msg string, cause error, ...) *VerificationError

+ func (e *VerificationError) AgentState() AgentState

+ func (e *VerificationError) Code() VerificationCode

+ func (e *VerificationError) Error() string

+ func (e *VerificationError) Is(target error) bool

+ func (e *VerificationError) Message() string

+ func (e *VerificationError) Transient() bool

+ func (e *VerificationError) Unwrap() error

+ func (e *VerificationError) VerifiedEntityKeyThumbprint() string

+ func (e *VerificationError) VerifiedGovernanceID() string

+ type VerificationErrorOption func(*VerificationError)

+ func WithAgentState(state AgentState) VerificationErrorOption

+ func WithVerifiedIdentity(governanceID, entityKeyThumbprint string) VerificationErrorOption

+ type VerifiedDomain struct

+ func VerifyIdentity(ctx context.Context, resolver IdentityResolver, domain string, ...) (*VerifiedDomain, error)

+ func (v *VerifiedDomain) CachedState() string

+ func (v *VerifiedDomain) DNSSECState() DNSSECState

+ func (v *VerifiedDomain) DNSTTL() time.Duration

+ func (v *VerifiedDomain) Domain() string

+ func (v *VerifiedDomain) Expiry() time.Time

+ func (v *VerifiedDomain) JWKSCertificate() *tls.Certificate

+ func (v *VerifiedDomain) JWKSLeafCertificate() *x509.Certificate

+ func (v *VerifiedDomain) KeyBoundAt() time.Time

+ func (v *VerifiedDomain) KeySet() *JWKS

+ func (v *VerifiedDomain) LastStatusCheckAt() time.Time

+ func (v *VerifiedDomain) LogReader() dnsidlog.LogReader

+ func (v *VerifiedDomain) Record() *TXTRecord

+ func (v *VerifiedDomain) RecordSigningKeySet() *JWKS

+ func (v *VerifiedDomain) RequiresLogCheck() bool

+ func (v *VerifiedDomain) SigningKey() *JWK

+ func (v *VerifiedDomain) Status() *AgentStatus

+ func (v *VerifiedDomain) StatusCertificate() *tls.Certificate

+ func (v *VerifiedDomain) StatusLeafCertificate() *x509.Certificate

+ func (v *VerifiedDomain) VerifiedAt() time.Time

+ func (v *VerifiedDomain) VerifyLogEvidence(ctx context.Context, at time.Time) (evidence dnsidlog.LoggedStateEvidence, err error)

+ type VerifyDomainOpts struct

+ PeerCertificate *x509.Certificate

+ VerifiedPeerCertificateChains [][]*x509.Certificate

+ type VerifyDomainRequest struct

+ Domain string

+ type VerifyDomainResponse struct

+ AgentStatus *string

+ Domain string

+ ErrorDetail string

+ ErrorTitle string

+ KeyMatch *bool

+ Reachable *bool

+ Registered bool

+ Remediation string

+ VerifiedAt *string

+ type WaitForStatusOptions struct

+ PollInterval time.Duration

+ Timeout time.Duration

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL