vault

Documentation

Index

• Constants
• func CertificateID(subject string, keyalgo string) string
• func CertificateIDFromCert(c *cert.Certificate) string
• type Client
  • func NewClient(vaultURL string) (*Client, error)
  • func (c *Client) DeleteCertificate(subject string, keyalgo string) error
  • func (c *Client) GetCertificates() ([]*cert.Certificate, error)
  • func (c *Client) PullCertificate(subject string, keyalgo string) (*cert.Certificate, error)
  • func (c *Client) PushCertificate(cert *cert.Certificate) error

Constants

const (

	// TagFingerprint is the key for the fingerprint meta data in a vault object
	TagFingerprint = "fingerprint"
	// TagKeyAlgo is the key for the PublicKeyAlgorithm meta data in a vault object
	TagKeyAlgo = "keyalgo"
	// TagNotAfter is the key for the expiry date meta data in a vault object
	TagNotAfter = "notafter"
	// TagSubjectCN is the key for the certificate subject common name meta data in a vault object
	TagSubjectCN = "subjectcn"
)

Functions

func CertificateID

func CertificateID(subject string, keyalgo string) string

CertificateID generates an object id to be used as an identifier for the cert in the vault

func CertificateIDFromCert

func CertificateIDFromCert(c *cert.Certificate) string

CertificateIDFromCert wraps CertificateID() for a certificate type

Types

type Client

type Client struct {
	VaultClient *azsecrets.Client
	VaultURL    string
}

Client represents a certdeploy client

func NewClient

func NewClient(vaultURL string) (*Client, error)

NewClient creates a new vault client

func (*Client) DeleteCertificate

func (c *Client) DeleteCertificate(subject string, keyalgo string) error

DeleteCertificate deletes a certificate from vault

func (*Client) GetCertificates

func (c *Client) GetCertificates() ([]*cert.Certificate, error)

GetCertificates returns a list of all certificates in vault

func (*Client) PullCertificate

func (c *Client) PullCertificate(subject string, keyalgo string) (*cert.Certificate, error)

PullCertificate fetches a certificate from the key vault

func (*Client) PushCertificate

func (c *Client) PushCertificate(cert *cert.Certificate) error

PushCertificate uploads a certificate to the key vault