dnsid

package module

Go to main page

Versions in this module

v0

v0.38.0

Oct 7, 2026

Changes in this version

type AgentRegistration

+ ID string

+ PublicationConfig PublicationConfig

type AgentRegistrationInput

+ CapabilitiesURL string

+ GovernanceDomain string

+ Name string

+ RootDomain string

+ Tier string

+ ZoneID string

type CreateAgentRequest

+ GovernanceDomain string

+ Metadata map[string]any

+ RootDomain string

+ Tier string

type HTTPRegistryClient

+ func (c *HTTPRegistryClient) CreateAgentWithIdempotencyKey(ctx context.Context, req *CreateAgentRequest, idempotencyKey string) (*CreateAgentResponse, error)

+ func (c *HTTPRegistryClient) RegisterAgent(ctx context.Context, input *AgentRegistrationInput, idempotencyKey string) (*AgentRegistration, error)

+ type RegistrationError struct

+ Cause error

+ Creation *CreateAgentResponse

+ IdempotencyKey string

+ Request json.RawMessage

+ func (e *RegistrationError) Error() string

+ func (e *RegistrationError) Unwrap() error

v0.37.2

Sep 30, 2026

v0.37.1

Sep 29, 2026

v0.37.0

Sep 28, 2026

v0.36.1

Sep 25, 2026

v0.36.0

Sep 24, 2026

Changes in this version

type Config

+ func (c Config) Validate() error

v0.35.0

Sep 23, 2026

Changes in this version

type Config

+ func ConfigFromEnv() (Config, error)

type TransportConfig

+ PrivateAddressHosts []string

+ func (c TransportConfig) IsZero() bool

v0.34.0

Sep 22, 2026

Changes in this version

type TransportConfig

+ AllowPrivateNetwork bool

v0.33.3

Sep 22, 2026

v0.33.2

Sep 21, 2026

Changes in this version

+ const DefaultRegistryURL

type HTTPRegistryClient

+ func NewRegistryClientFromEnv(opts ...RegistryClientOption) (*HTTPRegistryClient, error)

v0.33.1

Sep 15, 2026

Changes in this version

+ const AgentStateActive

+ const AgentStatePending

+ const AgentStateProvisioning

+ const AgentStateRetired

+ const AgentStateRevoked

+ const AgentStateVerifying

+ const DefaultPublishProfile

+ const DefaultVerificationTimeout

+ const RegistryStatusCancelled

+ const RegistryStatusError

+ const RegistryStatusFailed

+ const RegistryStatusReady

+ const RegistryStatusRejected

+ var ErrCounterpartyNotAccepted = &VerificationError

+ var ErrInvalidClaims = &VerificationError

+ var ErrInvalidSignature = &VerificationError

+ var ErrKeyStoreDurability = errors.New("dnsid: key store published but durability uncertain")

+ var ErrLifetimeTooLong = &VerificationError

+ var ErrMalformedToken = &VerificationError

+ var ErrOwnerSignatureInvalidJWKS = errors.New("dnsid: signature verification failed")

+ var ErrOwnerSignatureMalformed = errors.New("dnsid: signature verification failed")

+ var ErrOwnerSignatureNoMatchingKey = errors.New("dnsid: signature verification failed")

+ var ErrTokenExpired = &VerificationError

+ var ErrTokenNotYetValid = &VerificationError

+ var ValidKeyAgeValues = map[string]bool

+ var Version = resolveVersion()

+ func CreateDnsidHTTPClient(transportConfig TransportConfig) (*http.Client, error)

+ func MissingRequiredField(rec *TXTRecord) string

+ func NormalizeFQDN(input string) (string, error)

+ func ParseJWKSet(data []byte) (jwk.Set, error)

+ func ParseLogRef(lr string) (method, entryRef string, err error)

+ func RegistrantDomain(domain string) string

+ func SafeDialerTransport() *http.Transport

+ func SignLogEventWithKey(event dnsidlog.LogEvent, role LogSignerRole, kp KeyProvider, ...) (dnsidlog.LogEvent, error)

+ func Tags(rec *TXTRecord) map[string]string

+ func VerificationContext(ctx context.Context) (context.Context, context.CancelFunc)

+ type AgentDetail struct

+ ChainRecordStatus string

+ Challenge string

+ ChallengeExpiresAt *time.Time

+ CreatedAt time.Time

+ DNSPublished bool

+ DNSPublishedAt *time.Time

+ Domain string

+ DomainDisplay string

+ Environment string

+ Error *AgentError

+ ID string

+ IdentityRecordExpiresAt *time.Time

+ IdentityRecordExpiring *bool

+ Managed string

+ Name string

+ ProtocolStatus *AgentStatus

+ PublicationConfig PublicationConfig

+ RevocationReason string

+ RevokedAt *time.Time

+ ServerStatus string

+ Status string

+ StatusURL string

+ TransactionID string

+ UpdatedAt time.Time

+ func WaitForRegistryStatus(ctx context.Context, client RegistryStatusReader, fqdn string, ...) (*AgentDetail, error)

+ type AgentError struct

+ Code string

+ Detail string

+ Remediation string

+ Title string

+ type AgentEvent struct

+ ActorID *string

+ AgentID string

+ CreatedAt time.Time

+ Details map[string]any

+ EventType string

+ ID string

+ type AgentListItem struct

+ CreatedAt time.Time

+ Domain string

+ DomainDisplay string

+ Environment string

+ ID string

+ Status string

+ UpdatedAt time.Time

+ type AgentListResponse struct

+ Agents []AgentListItem

+ NextCursor string

+ type AgentRegistration struct

+ DNSPublished bool

+ Domain string

+ OIDCIssuerURL string

+ ProtocolStatus *AgentStatus

+ PublicationAuthority PublicationAuthority

+ Raw json.RawMessage

+ RegistryStatus string

+ RegistryURL string

+ type AgentRegistrationInput struct

+ Domain string

+ Environment string

+ Managed bool

+ Metadata map[string]any

+ PublicKeyJWK any

+ type AgentState = dnsidlog.AgentState

+ func AgentStates() []AgentState

+ func ParseAgentState(s string) (AgentState, error)

+ type AgentStatus struct

+ LastTransitionAt time.Time

+ RevocationReason string

+ State AgentState

+ func (s *AgentStatus) Validate() error

+ type ArgumentError = sdkerrors.ArgumentError

+ func NewArgumentError(msg string, cause error) *ArgumentError

+ type CanonicalRecordContentResponse struct

+ Canonical string

+ Raw json.RawMessage

+ SigningKid string

+ type ChallengeRequest struct

+ Nonce string

+ Signature string

+ type Config struct

+ Identity *IdentityConfig

+ Transport TransportConfig

+ Verification VerificationConfig

+ type CreateAgentRequest struct

+ CapabilitiesURL string

+ Domain string

+ Environment string

+ Managed bool

+ Name string

+ PublicKey any

+ ZoneID string

+ type CreateAgentResponse struct

+ Domain string

+ DomainDisplay string

+ ID string

+ Name string

+ OIDCIssuerURL string

+ PublicationConfig PublicationConfig

+ Status string

+ StatusURL string

+ type DNSRecord struct

+ Name string

+ TTL int

+ Type string

+ Value string

+ type DNSResolver interface

+ FetchTXT func(ctx context.Context, name string) ([]TXTRecordRData, DNSSECState, error)

+ type DNSSECMode string

+ const DNSSECModeAuto

+ const DNSSECModeRequired

+ const DNSSECModeValidated

+ type DNSSECState string

+ const DNSSECStateFailed

+ const DNSSECStateUnknown

+ const DNSSECStateUnsigned

+ const DNSSECStateValid

+ type EventListOptions struct

+ Cursor string

+ Limit int

+ type EventListResponse struct

+ Events []AgentEvent

+ NextCursor *string

+ type FetchOptions struct

+ AllowedHost string

+ DomainBoundary bool

+ MaxResponseBytes int64

+ RedirectPolicy RedirectPolicy

+ type HTTPRegistryClient struct

+ func NewRegistryClient(baseURL string, transportConfig ...TransportConfig) (*HTTPRegistryClient, error)

+ func NewRegistryClientWithOptions(baseURL string, opts ...RegistryClientOption) (*HTTPRegistryClient, error)

+ func (c *HTTPRegistryClient) CancelAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) CanonicalRecordContent(ctx context.Context, domain, signingKid string) (*CanonicalRecordContentResponse, error)

+ func (c *HTTPRegistryClient) ConfirmReady(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) CreateAgent(ctx context.Context, req *CreateAgentRequest) (*CreateAgentResponse, error)

+ func (c *HTTPRegistryClient) CreateLiveAgent(ctx context.Context, req *LiveAgentRegistrationInput, idempotencyKey string) (*LiveProvisioningResponse, error)

+ func (c *HTTPRegistryClient) GetAgentEvents(ctx context.Context, fqdn string, opts *EventListOptions) (*EventListResponse, error)

+ func (c *HTTPRegistryClient) GetAgentStatus(ctx context.Context, fqdn string) (*AgentDetail, error)

+ func (c *HTTPRegistryClient) GetIdentityRecord(ctx context.Context, fqdn string, req *IdentityRecordRequest) (*IdentityRecordResponse, error)

+ func (c *HTTPRegistryClient) GetRegistration(ctx context.Context, fqdn string) (*AgentRegistration, error)

+ func (c *HTTPRegistryClient) ListAgents(ctx context.Context, opts *ListAgentsOptions) (*AgentListResponse, error)

+ func (c *HTTPRegistryClient) ListExpiringAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) ListFlaggedAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) ListPendingAgents(ctx context.Context) (*OperationsAgentListResponse, error)

+ func (c *HTTPRegistryClient) PrepareIssuance(ctx context.Context, fqdn, idempotencyKey string) (*PreparedRegistryEvent, error)

+ func (c *HTTPRegistryClient) PrepareKeyRotation(ctx context.Context, fqdn string, req *KeyRotationPreparationRequest, ...) (*PreparedRegistryEvent, error)

+ func (c *HTTPRegistryClient) PublishSignature(ctx context.Context, domain, sig string) (*PublishedRecord, error)

+ func (c *HTTPRegistryClient) ReissueLiveProof(ctx context.Context, fqdn string, req *LiveProofReissueRequest) (*LiveProofReissueResponse, error)

+ func (c *HTTPRegistryClient) RejectAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) RetireAgent(ctx context.Context, fqdn string, req *RetireAgentRequest) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) RevokeAgent(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) SetAuthToken(token string) error

+ func (c *HTTPRegistryClient) SubmitChallenge(ctx context.Context, fqdn string, req *ChallengeRequest) error

+ func (c *HTTPRegistryClient) SubmitLiveProof(ctx context.Context, fqdn string, req *LiveProofRequest) (*LiveProofResponse, error)

+ func (c *HTTPRegistryClient) SubmitPreparedEvent(ctx context.Context, fqdn string, entryBytes []byte, idempotencyKey string) (*SubmissionResult, error)

+ func (c *HTTPRegistryClient) SubmitSignature(ctx context.Context, fqdn string, req *SignatureRequest) (*SignatureResponse, error)

+ func (c *HTTPRegistryClient) UnregisterAgent(ctx context.Context, fqdn string) error

+ func (c *HTTPRegistryClient) VerifyAgent(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ func (c *HTTPRegistryClient) VerifyDomainRemote(ctx context.Context, req *VerifyDomainRequest) (*VerifyDomainResponse, error)

+ func (c *HTTPRegistryClient) WaitForStatus(ctx context.Context, fqdn string, targetStatuses []string, ...) (*AgentDetail, error)

+ type HTTPSFetcher interface

+ FetchJSON func(ctx context.Context, rawURL string, opts FetchOptions) (json.RawMessage, *tls.Certificate, error)

+ type IdentityCache struct

+ func NewIdentityCache(_ time.Duration) *IdentityCache

+ func (c *IdentityCache) Evict(domain string)

+ func (c *IdentityCache) Get(domain string) *VerifiedDomain

+ func (c *IdentityCache) Put(vd *VerifiedDomain)

+ type IdentityConfig struct

+ CapabilitiesURL string

+ Domain string

+ EntityKeyURL string

+ GovernanceID string

+ KeyURL string

+ LogRef string

+ MaxKeyAge KeyAge

+ PolicyFlags []PolicyFlag

+ PublishProfile string

+ StatusURL string

+ func (c IdentityConfig) Validate() error

+ type IdentityManager struct

+ func NewIdentityManager(cfg Config, kp KeyProvider, opts ...IdentityManagerOption) (*IdentityManager, error)

+ func NewIdentityManagerFromDnsid(dir string, cfg Config, opts ...IdentityManagerOption) (*IdentityManager, error)

+ func NewVerifier(opts ...IdentityManagerOption) (*IdentityManager, error)

+ func (m *IdentityManager) AwaitRegistryManagedPublication(ctx context.Context, client RegistryRegistrationReader, ...) (*PublishedRecord, error)

+ func (m *IdentityManager) BuildUnsignedTXTRecord() (*TXTRecord, error)

+ func (m *IdentityManager) CanonicalizeLogEvent(event dnsidlog.LogEvent) ([]byte, error)

+ func (m *IdentityManager) CreateTXTRecord() (*TXTRecord, error)

+ func (m *IdentityManager) Domain() string

+ func (m *IdentityManager) EntityKeyURL() string

+ func (m *IdentityManager) EvictDomain(domain string)

+ func (m *IdentityManager) GenerateIssuanceEvent(ctx context.Context) (dnsidlog.LogRef, error)

+ func (m *IdentityManager) GetEntityKeySet() *JWKS

+ func (m *IdentityManager) GetKeySet() *JWKS

+ func (m *IdentityManager) KeyProvider() KeyProvider

+ func (m *IdentityManager) LoadDomainLog(ctx context.Context, vd *VerifiedDomain) (*dnsidlog.DomainLog, error)

+ func (m *IdentityManager) OperationalKeyURL() string

+ func (m *IdentityManager) PublishClientControlledRecord(ctx context.Context, client RegistryClientControlledPublisher) (*PublishedRecord, error)

+ func (m *IdentityManager) RevokeViaRegistry(ctx context.Context, client RegistryRevoker, agentID string, ...) (*LifecycleResponse, error)

+ func (m *IdentityManager) SignAndWriteEvent(ctx context.Context, event dnsidlog.LogEvent) (dnsidlog.LogRef, error)

+ func (m *IdentityManager) SignLogEvent(event dnsidlog.LogEvent, role LogSignerRole) (dnsidlog.LogEvent, error)

+ func (m *IdentityManager) VerifyDomain(ctx context.Context, domain string) (*VerifiedDomain, error)

+ func (m *IdentityManager) VerifyDomainWithOptions(ctx context.Context, domain string, opts VerifyDomainOpts) (*VerifiedDomain, error)

+ func (m *IdentityManager) VerifyLogEvidence(ctx context.Context, vd *VerifiedDomain, at time.Time) (dnsidlog.LoggedStateEvidence, error)

+ func (m *IdentityManager) WriteSignedEvent(ctx context.Context, event dnsidlog.LogEvent) (dnsidlog.LogRef, error)

+ type IdentityManagerOption func(*IdentityManager)

+ func WithDNSResolver(r DNSResolver) IdentityManagerOption

+ func WithEntityKeyProvider(kp KeyProvider) IdentityManagerOption

+ func WithHTTPClient(client *http.Client) IdentityManagerOption

+ func WithHTTPSFetcher(f HTTPSFetcher) IdentityManagerOption

+ func WithIdentityCache(cache *IdentityCache) IdentityManagerOption

+ func WithLogRegistry(r *dnsidlog.LogRegistry) IdentityManagerOption

+ type IdentityRecordRequest struct

+ SigningKid string

+ type IdentityRecordResponse struct

+ CanonicalContent string

+ ExpiresAt string

+ FQDN string

+ SigningKid string

+ Tags map[string]string

+ type IdentityResolver interface

+ VerifyDomain func(ctx context.Context, domain string) (*VerifiedDomain, error)

+ type JWK struct

+ func (k *JWK) Alg() JoseAlg

+ func (k *JWK) Kid() string

+ func (k *JWK) Raw() jwk.Key

+ func (k *JWK) SignatureAlg(profile string) (JoseAlg, error)

+ func (k *JWK) Thumbprint() (string, error)

+ func (k *JWK) Use() string

+ type JWKS struct

+ func NewJWKS(set jwk.Set) *JWKS

+ func ParseJWKS(data []byte) (*JWKS, error)

+ func (j *JWKS) CurrentOperationalSigningKey(profile string) (*JWK, error)

+ func (j *JWKS) CurrentRecordSigningKey(profile string) (*JWK, error)

+ func (j *JWKS) KeyByID(kid string) *JWK

+ func (j *JWKS) Raw() jwk.Set

+ func (j *JWKS) SigningKeys() []*JWK

+ func (j *JWKS) Validate() error

+ func (j *JWKS) ValidateOperational(profile string) error

+ func (j *JWKS) ValidateRecordSigning(profile string) error

+ type JoseAlg string

+ const JoseAlgES256

+ const JoseAlgEdDSA

+ func (a JoseAlg) String() string

+ func (a JoseAlg) Valid() bool

+ type KeyAge string

+ type KeyProvider interface

+ Activate func(kid string) error

+ GenerateKey func(alg JoseAlg) (string, error)

+ JWK func(kid ...string) jwk.Key

+ ListKeyIds func() []string

+ Purge func(kid string) error

+ Sign func(payload []byte) (*KeySignature, error)

+ SignKey func(kid string, payload []byte) (*KeySignature, error)

+ Supersede func(kid string) error

+ type KeyRotationPreparationRequest struct

+ PreviousKeyID string

+ PublicKey any

+ type KeySignature struct

+ Alg JoseAlg

+ Kid string

+ Signature []byte

+ type LifecycleResponse struct

+ ID string

+ Status string

+ StatusNote string

+ type ListAgentsOptions struct

+ Cursor string

+ Limit int

+ type LiveAgentRegistrationInput struct

+ CapabilitiesURL string

+ Environment string

+ Name string

+ PublicKey any

+ type LiveChallengeTranscript struct

+ AgentID string

+ ExpiresAt time.Time

+ FQDN string

+ KeyID string

+ Nonce string

+ OrgID string

+ Protocol string

+ type LiveProofReissueRequest struct

+ PublicKey any

+ RequestID string

+ type LiveProofReissueResponse struct

+ AgentID string

+ Challenge string

+ ChallengeMessage string

+ ChallengeTranscript *LiveChallengeTranscript

+ Domain string

+ RequestID string

+ Status string

+ type LiveProofRequest struct

+ Challenge string

+ PublicKey any

+ RequestID string

+ Signature string

+ type LiveProofResponse struct

+ AgentID string

+ RequestID string

+ Status string

+ type LiveProvisioningResponse struct

+ AgentID string

+ Challenge string

+ ChallengeMessage string

+ ChallengeTranscript *LiveChallengeTranscript

+ Domain string

+ RequestID string

+ Status string

+ type LocalKeyProvider struct

+ func GenerateES256KeyProvider() *LocalKeyProvider

+ func GenerateEd25519KeyProvider() *LocalKeyProvider

+ func LoadOrCreateLocalKeyProvider(path string, alg JoseAlg) (*LocalKeyProvider, error)

+ func NewLocalKeyProvider(path string) (*LocalKeyProvider, error)

+ func (p *LocalKeyProvider) Activate(kid string) error

+ func (p *LocalKeyProvider) GenerateKey(alg JoseAlg) (string, error)

+ func (p *LocalKeyProvider) JWK(kidOpt ...string) jwk.Key

+ func (p *LocalKeyProvider) ListKeyIds() []string

+ func (p *LocalKeyProvider) Purge(kid string) error

+ func (p *LocalKeyProvider) Sign(payload []byte) (*KeySignature, error)

+ func (p *LocalKeyProvider) SignKey(kid string, payload []byte) (*KeySignature, error)

+ func (p *LocalKeyProvider) Supersede(kid string) error

+ type LogEventCanonicalizer interface

+ Canonical func(event dnsidlog.LogEvent) ([]byte, error)

+ type LogSignerRole string

+ const LogSignerEntity

+ const LogSignerNewOperational

+ const LogSignerOperationalCountersignature

+ const LogSignerPreviousOperational

+ func RequiredLogSignatures(event dnsidlog.LogEvent) ([]LogSignerRole, error)

+ type OperationsAgent struct

+ CreatedAt time.Time

+ DaysRemaining *int

+ Domain string

+ DomainDisplay string

+ Environment string

+ Error *AgentError

+ ID string

+ IdentityRecordExpiresAt *string

+ Status string

+ UpdatedAt time.Time

+ type OperationsAgentListResponse struct

+ Agents []OperationsAgent

+ type ParseError = sdkerrors.ParseError

+ func NewParseError(msg string, cause error) *ParseError

+ type PolicyFlag string

+ const PolicyFlagLogCheck

+ const PolicyFlagMTLS

+ type PreparedRegistryEvent struct

+ EntryBytes []byte

+ LogReference string

+ type PublicationAuthority string

+ const PublicationAuthorityClient

+ const PublicationAuthorityRegistry

+ type PublicationConfig struct

+ CapabilitiesURL string

+ EntityKeyURL string

+ GovernanceID string

+ KeyURL string

+ LogRef string

+ MaxKeyAge string

+ PublishProfile string

+ StatusURL string

+ type PublishedRecord struct

+ Domain string

+ OwnerName string

+ ProtocolStatus *AgentStatus

+ PublicationStatus string

+ Raw json.RawMessage

+ TTL int

+ TXTRecord string

+ type RedirectPolicy string

+ const RedirectPolicyHTTPS

+ const RedirectPolicyNone

+ const RedirectPolicySameHost

+ type RegistryAPIError struct

+ Cause error

+ Code string

+ Message string

+ StatusCode int

+ func (e *RegistryAPIError) Error() string

+ func (e *RegistryAPIError) RetrySameEntry() bool

+ func (e *RegistryAPIError) SubmissionState() SubmissionState

+ func (e *RegistryAPIError) Transient() bool

+ func (e *RegistryAPIError) Unwrap() error

+ type RegistryClient interface

+ CancelAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ ConfirmReady func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ CreateAgent func(ctx context.Context, req *CreateAgentRequest) (*CreateAgentResponse, error)

+ CreateLiveAgent func(ctx context.Context, req *LiveAgentRegistrationInput, idempotencyKey string) (*LiveProvisioningResponse, error)

+ GetAgentEvents func(ctx context.Context, fqdn string, opts *EventListOptions) (*EventListResponse, error)

+ GetAgentStatus func(ctx context.Context, fqdn string) (*AgentDetail, error)

+ GetIdentityRecord func(ctx context.Context, fqdn string, req *IdentityRecordRequest) (*IdentityRecordResponse, error)

+ ListAgents func(ctx context.Context, opts *ListAgentsOptions) (*AgentListResponse, error)

+ ListExpiringAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ListFlaggedAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ListPendingAgents func(ctx context.Context) (*OperationsAgentListResponse, error)

+ ReissueLiveProof func(ctx context.Context, fqdn string, req *LiveProofReissueRequest) (*LiveProofReissueResponse, error)

+ RejectAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ RetireAgent func(ctx context.Context, fqdn string, req *RetireAgentRequest) (*LifecycleResponse, error)

+ RevokeAgent func(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ SubmitChallenge func(ctx context.Context, fqdn string, req *ChallengeRequest) error

+ SubmitLiveProof func(ctx context.Context, fqdn string, req *LiveProofRequest) (*LiveProofResponse, error)

+ SubmitSignature func(ctx context.Context, fqdn string, req *SignatureRequest) (*SignatureResponse, error)

+ UnregisterAgent func(ctx context.Context, fqdn string) error

+ VerifyAgent func(ctx context.Context, fqdn string) (*LifecycleResponse, error)

+ VerifyDomainRemote func(ctx context.Context, req *VerifyDomainRequest) (*VerifyDomainResponse, error)

+ type RegistryClientControlledPublisher interface

+ type RegistryClientOption func(*HTTPRegistryClient)

+ func WithAuthToken(token string) RegistryClientOption

+ func WithInsecureHTTP() RegistryClientOption

+ func WithRegistryHTTPClient(client *http.Client) RegistryClientOption

+ type RegistryConfig struct

+ RegistryURL string

+ type RegistryPreparedEventClient interface

+ PrepareIssuance func(ctx context.Context, fqdn, idempotencyKey string) (*PreparedRegistryEvent, error)

+ PrepareKeyRotation func(ctx context.Context, fqdn string, req *KeyRotationPreparationRequest, ...) (*PreparedRegistryEvent, error)

+ SubmitPreparedEvent func(ctx context.Context, fqdn string, entryBytes []byte, idempotencyKey string) (*SubmissionResult, error)

+ type RegistryPublisher interface

+ CanonicalRecordContent func(ctx context.Context, domain, signingKid string) (*CanonicalRecordContentResponse, error)

+ PublishSignature func(ctx context.Context, domain, sig string) (*PublishedRecord, error)

+ type RegistryRegistrationReader interface

+ GetRegistration func(ctx context.Context, domain string) (*AgentRegistration, error)

+ type RegistryRevocationReason string

+ const RegistryRevocationReasonKeyCompromise

+ const RegistryRevocationReasonOwnerRequest

+ type RegistryRevoker interface

+ RevokeAgent func(ctx context.Context, fqdn string, req *RevokeAgentRequest) (*LifecycleResponse, error)

+ type RegistryStatusReader interface

+ GetAgentStatus func(ctx context.Context, fqdn string) (*AgentDetail, error)

+ type RegistryWorkflowError struct

+ Cause error

+ Registration *AgentRegistration

+ Status string

+ func (e *RegistryWorkflowError) Error() string

+ func (e *RegistryWorkflowError) Unwrap() error

+ type RetireAgentRequest struct

+ AgentID string

+ type RevokeAgentRequest struct

+ AgentID string

+ Reason RegistryRevocationReason

+ type SDKConformanceMetadata struct

+ KnownDeviations []string

+ LogBindings map[string]string

+ PublishProfile string

+ SpecificationStatus string

+ VerificationProfiles map[string]string

+ func SDKConformance() SDKConformanceMetadata

+ type SignatureRequest struct

+ Signature string

+ type SignatureResponse struct

+ FQDN string

+ Message string

+ Records []DNSRecord

+ Status string

+ ZoneFile string

+ type SubmissionResult struct

+ EntryHash string

+ ErrorCode string

+ Index *uint64

+ KeyID string

+ LogRef string

+ State SubmissionState

+ type SubmissionState string

+ const SubmissionStateAccepted

+ const SubmissionStateIndeterminate

+ const SubmissionStatePending

+ const SubmissionStatePrepared

+ const SubmissionStateRejected

+ const SubmissionStateSubmitting

+ type TXTRecord struct

+ Capabilities string

+ EntityKeyURI string

+ Flags []string

+ GovernanceID string

+ KeyAge string

+ KeyURI string

+ LogRef string

+ Signature string

+ StatusURI string

+ UnknownTags map[string]string

+ Version string

+ func ParseTXTRecord(txt string) (*TXTRecord, error)

+ func ParseUnsignedCanonical(txt string) (*TXTRecord, error)

+ func (r *TXTRecord) Canonical() string

+ func (r *TXTRecord) CanonicalContent() []byte

+ func (r *TXTRecord) KnownTagsCanonical() []byte

+ func (r *TXTRecord) MarshalTXT() (string, error)

+ func (r *TXTRecord) Serialize() string

+ func (r *TXTRecord) Tags() map[string]string

+ func (r *TXTRecord) Validate(identityFQDN string) error

+ func (r *TXTRecord) WithSignature(sig string) *TXTRecord

+ type TXTRecordRData struct

+ TTL time.Duration

+ Value string

+ type TransportConfig struct

+ CABundlePath string

+ DNSServer string

+ type TrustedEntity struct

+ EntityKeyThumbprints []string

+ GovernanceID string

+ type ValidationError struct

+ Cause error

+ Message string

+ func NewValidationError(msg string, cause error) *ValidationError

+ func (e *ValidationError) Error() string

+ func (e *ValidationError) Is(target error) bool

+ func (e *ValidationError) Unwrap() error

+ type VerificationCode string

+ const VerificationCodeAgentNotFound

+ const VerificationCodeAudienceMismatch

+ const VerificationCodeChainContinuity

+ const VerificationCodeCounterpartyNotAccepted

+ const VerificationCodeDNSResolution

+ const VerificationCodeDNSSECFailed

+ const VerificationCodeDuplicateIssuance

+ const VerificationCodeIncompleteStream

+ const VerificationCodeInvalidClaims

+ const VerificationCodeInvalidEvidence

+ const VerificationCodeInvalidMigration

+ const VerificationCodeIssuerMismatch

+ const VerificationCodeJWKSUnavailable

+ const VerificationCodeKeyAgeExceeded

+ const VerificationCodeKeyContinuity

+ const VerificationCodeKeyNotFound

+ const VerificationCodeLifetimeTooLong

+ const VerificationCodeLogError

+ const VerificationCodeMalformedToken

+ const VerificationCodePolicyNotSatisfied

+ const VerificationCodeRecordInvalid

+ const VerificationCodeSignatureInvalid

+ const VerificationCodeStatusNotActive

+ const VerificationCodeStatusUnavailable

+ const VerificationCodeTLSError

+ const VerificationCodeTerminalState

+ const VerificationCodeTokenExpired

+ const VerificationCodeTokenNotYetValid

+ type VerificationConfig struct

+ DNSSECMode DNSSECMode

+ StatusCheckInterval time.Duration

+ TrustedEntities []TrustedEntity

+ type VerificationError struct

+ func NewVerificationError(code VerificationCode, transient bool, msg string, cause error, ...) *VerificationError

+ func (e *VerificationError) AgentState() AgentState

+ func (e *VerificationError) Code() VerificationCode

+ func (e *VerificationError) Error() string

+ func (e *VerificationError) Is(target error) bool

+ func (e *VerificationError) Message() string

+ func (e *VerificationError) Transient() bool

+ func (e *VerificationError) Unwrap() error

+ func (e *VerificationError) VerifiedEntityKeyThumbprint() string

+ func (e *VerificationError) VerifiedGovernanceID() string

+ type VerificationErrorOption func(*VerificationError)

+ func WithAgentState(state AgentState) VerificationErrorOption

+ func WithVerifiedIdentity(governanceID, entityKeyThumbprint string) VerificationErrorOption

+ type VerifiedDomain struct

+ func VerifyIdentity(ctx context.Context, resolver IdentityResolver, domain string, ...) (*VerifiedDomain, error)

+ func (v *VerifiedDomain) CachedState() string

+ func (v *VerifiedDomain) DNSSECState() DNSSECState

+ func (v *VerifiedDomain) DNSTTL() time.Duration

+ func (v *VerifiedDomain) Domain() string

+ func (v *VerifiedDomain) Expiry() time.Time

+ func (v *VerifiedDomain) JWKSCertificate() *tls.Certificate

+ func (v *VerifiedDomain) JWKSLeafCertificate() *x509.Certificate

+ func (v *VerifiedDomain) KeyBoundAt() time.Time

+ func (v *VerifiedDomain) KeySet() *JWKS

+ func (v *VerifiedDomain) LastStatusCheckAt() time.Time

+ func (v *VerifiedDomain) LogReader() dnsidlog.LogReader

+ func (v *VerifiedDomain) Record() *TXTRecord

+ func (v *VerifiedDomain) RecordSigningKeySet() *JWKS

+ func (v *VerifiedDomain) RequiresLogCheck() bool

+ func (v *VerifiedDomain) SigningKey() *JWK

+ func (v *VerifiedDomain) Status() *AgentStatus

+ func (v *VerifiedDomain) StatusCertificate() *tls.Certificate

+ func (v *VerifiedDomain) StatusLeafCertificate() *x509.Certificate

+ func (v *VerifiedDomain) VerifiedAt() time.Time

+ func (v *VerifiedDomain) VerifyLogEvidence(ctx context.Context, at time.Time) (evidence dnsidlog.LoggedStateEvidence, err error)

+ type VerifyDomainOpts struct

+ PeerCertificate *x509.Certificate

+ VerifiedPeerCertificateChains [][]*x509.Certificate

+ type VerifyDomainRequest struct

+ Domain string

+ type VerifyDomainResponse struct

+ AgentStatus *string

+ Domain string

+ ErrorDetail string

+ ErrorTitle string

+ KeyMatch *bool

+ Reachable *bool

+ Registered bool

+ Remediation string

+ VerifiedAt *string

+ type WaitForStatusOptions struct

+ PollInterval time.Duration

+ Timeout time.Duration

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL