kms

Documentation

Index

• Constants
• type Key
• type Signer
  • func NewSigner(keys map[string]Key, opts ...SignerOpt) (*Signer, error)
  • func (s *Signer) Close() error
  • func (s *Signer) Sign(checkName, body string) (string, string, error)
• type SignerOpt
  • func WithKMSClient(client kmsClient) SignerOpt

Constants

const (
	AlgoSHA256 = "SHA256"
	AlgoSHA384 = "SHA384"
	AlgoSHA512 = "SHA512"
	APIPath    = "//cloudkms.googleapis.com/v1"
)

Types

type Key

type Key struct {
	Path string
	Algo string
}

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

Signer is an AttestationSigner that uses Google's Cloud KMS to sign attestations Only supports SHA512 digests.

func NewSigner

func NewSigner(keys map[string]Key, opts ...SignerOpt) (*Signer, error)

func (*Signer) Close

func (s *Signer) Close() error

Close closes the KMS signer's connections.

func (*Signer) Sign

func (s *Signer) Sign(checkName, body string) (string, string, error)

type SignerOpt

type SignerOpt func(*Signer)

func WithKMSClient

func WithKMSClient(client kmsClient) SignerOpt