ca

Documentation

Index

• func Verify(pubkey sshcert.RawPublicKey, token, signature string) error
• type AuthToken
• type CA
  • func New(privateKey sshcert.RawPrivateKey, policyURL string, options ...Option) (*CA, error)
  • func (c *CA) PolicyURL() string
  • func (c *CA) PublicKey() sshcert.RawPublicKey
  • func (c *CA) RequestPolicy(ctx context.Context, token string) (*CertParams, error)
  • func (c *CA) Sign(value string) (signature string, err error)
  • func (c *CA) SignPublicKey(rawPubKey sshcert.RawPublicKey, params *CertParams) (sshcert.RawCertificate, error)
• type CertParams
• type Option
  • func WithHTTPClient(httpClient *http.Client) Option

Functions

func Verify

func Verify(pubkey sshcert.RawPublicKey, token, signature string) error

Types

type AuthToken

type AuthToken struct {
	Provider string
	Token    string
}

AuthToken is the token passed from the plugin through to the CA (and to the ca verifier plugin matching Provider) Token is opaque and can hold whatever the plugins need it to

type CA

type CA struct {
	// contains filtered or unexported fields
}

CA performs CA operations

func New

func New(privateKey sshcert.RawPrivateKey, policyURL string, options ...Option) (*CA, error)

New creates a new CA

func (*CA) PolicyURL

func (c *CA) PolicyURL() string

get the URL of the Policy Server

func (*CA) PublicKey

func (c *CA) PublicKey() sshcert.RawPublicKey

PublicKey returns the ssh on-disk format public key for the CA

func (*CA) RequestPolicy

func (c *CA) RequestPolicy(ctx context.Context, token string) (*CertParams, error)

RequestPolicy requests policy from the policy url

func (*CA) Sign

func (c *CA) Sign(value string) (signature string, err error)

func (*CA) SignPublicKey

func (c *CA) SignPublicKey(rawPubKey sshcert.RawPublicKey, params *CertParams) (sshcert.RawCertificate, error)

SignPublicKey signs a key to generate a certificate

type CertParams

type CertParams struct {
	Identity   string            `json:"identity"`
	Names      []string          `json:"principals"`
	Expiration time.Duration     `json:"expiration"`
	Extensions map[string]string `json:"extensions"`
}

CertParams are options which can be set on a certificate

type Option

type Option interface {
	// contains filtered or unexported methods
}

Option configures the agent

func WithHTTPClient

func WithHTTPClient(httpClient *http.Client) Option

WithHTTPClient configures the CA to use the specified HTTP Client