csrprov

Jun 18, 2020

Changes in this version

+ const CurveP256

+ const CurveP384

+ const CurveP521

+ func MakeCAPolicy(req *CertificateRequest) (*config.Signing, error)

+ func NewLocalCASignerFromFile(c *cryptoprov.Crypto, caFile, caKeyFile string, policy *config.Signing) (*local.Signer, crypto.Signer, error)

+ func NewLocalCASignerFromPEM(c *cryptoprov.Crypto, ca, caKey []byte, policy *config.Signing) (*local.Signer, crypto.Signer, error)

+ func ParseCaFiles(caFile, caKeyFile string) (cakey []byte, parsedCa *x509.Certificate, err error)

+ func SigAlgo(algo string, size int) x509.SignatureAlgorithm

+ func ValidateCSR(req *CertificateRequest) error

+ type CAConfig struct

+ Backdate string

+ Expiry string

+ PathLenZero bool

+ PathLength int

+ func (c *CAConfig) ConvertToCFSSL() *csr.CAConfig

+ func (c *CAConfig) CopyToCFSSL(d *csr.CAConfig)

+ type CertificateRequest struct

+ CA *CAConfig

+ CN string

+ Hosts []string

+ KeyRequest KeyRequest

+ Names []X509Name

+ SerialNumber string

+ func (cr *CertificateRequest) Name() pkix.Name

+ type KeyPurpose int

+ const Encryption

+ const Signing

+ const Undefined

+ type KeyRequest interface

+ Algo func() string

+ Generate func() (crypto.PrivateKey, error)

+ Label func() string

+ Purpose func() int

+ SigAlgo func() x509.SignatureAlgorithm

+ Size func() int

+ func NewKeyRequest(prov cryptoprov.Provider, label, algo string, keySize int, purpose KeyPurpose) KeyRequest

+ type Provider struct

+ func New(provider cryptoprov.Provider) *Provider

+ func (c *Provider) NewKeyRequest(label, algo string, keySize int, purpose KeyPurpose) KeyRequest

+ func (c *Provider) NewRoot(req *CertificateRequest) (cert, csrPEM, key []byte, err error)

+ func (c *Provider) NewSigningCertificateRequest(keyLabel, algo string, keySize int, CN string, names []X509Name, ...) *CertificateRequest

+ func (c *Provider) ParseCsrRequest(req *CertificateRequest) (csr []byte, priv crypto.PrivateKey, keyID string, err error)

+ func (c *Provider) ProcessCsrRequest(req *CertificateRequest) (csrPEM, key []byte, keyID string, pub crypto.PublicKey, err error)

+ type X509Name struct

+ C string

+ L string

+ O string

+ OU string

+ ST string

+ SerialNumber string

+ func (c *X509Name) ConvertToCFSSL() *csr.Name

+ func (c *X509Name) CopyToCFSSL(d *csr.Name)