service

Documentation

Index

• func AddHandler(svr *kitNetGrpc.Server, cfg SignerConfig) error
• func Register(server *grpc.Server, handler *RequestHandler)
• type CertificateSigner
• type RequestHandler
  • func NewRequestHandler(ValidFrom func() time.Time, ValidFor time.Duration, ...) *RequestHandler
  • func NewRequestHandlerFromConfig(cfg SignerConfig) (*RequestHandler, error)
  • func (r *RequestHandler) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
  • func (r *RequestHandler) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)
• type SignerConfig
• type ValidFromDecoder
  • func (d *ValidFromDecoder) Decode(value string) error

Functions

func AddHandler

func AddHandler(svr *kitNetGrpc.Server, cfg SignerConfig) error

func Register

func Register(server *grpc.Server, handler *RequestHandler)

Register registers the handler instance with a gRPC server.

Types

type CertificateSigner

type CertificateSigner interface {
	//csr is encoded by PEM and returns PEM
	Sign(ctx context.Context, csr []byte) ([]byte, error)
}

type RequestHandler

type RequestHandler struct {
	ValidFrom   func() time.Time
	ValidFor    time.Duration
	Certificate []*x509.Certificate
	PrivateKey  crypto.PrivateKey
}

RequestHandler handles incoming requests.

func NewRequestHandler

func NewRequestHandler(
	ValidFrom func() time.Time,
	ValidFor time.Duration,
	Certificate []*x509.Certificate,
	PrivateKey crypto.PrivateKey) *RequestHandler

NewRequestHandler factory for new RequestHandler.

func NewRequestHandlerFromConfig

func NewRequestHandlerFromConfig(cfg SignerConfig) (*RequestHandler, error)

func (*RequestHandler) SignCertificate

func (r *RequestHandler) SignCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

func (*RequestHandler) SignIdentityCertificate

func (r *RequestHandler) SignIdentityCertificate(ctx context.Context, req *pb.SignCertificateRequest) (*pb.SignCertificateResponse, error)

type SignerConfig

type SignerConfig struct {
	Certificate   string           `envconfig:"CERTIFICATE"`
	PrivateKey    string           `envconfig:"PRIVATE_KEY"`
	ValidFrom     ValidFromDecoder `envconfig:"VALID_FROM" default:"now"`
	ValidDuration time.Duration    `envconfig:"VALID_DURATION" default:"87600h"`
}

type ValidFromDecoder

type ValidFromDecoder func() time.Time

func (*ValidFromDecoder) Decode

func (d *ValidFromDecoder) Decode(value string) error