ssh

Documentation

Index

• func CreateSSHCertificate(certReq types.SSHSignRequest, storage backend.Storage) (types.SSHCertificate, httperror.HTTPError)
• func CreateSSHTemplate(template types.SSHTemplate, storage backend.Storage) httperror.HTTPError
• func DeleteSSHTemplate(templateName string, storage backend.Storage) httperror.HTTPError
• func GetSSHTemplate(templateName string, storage backend.Storage) (types.SSHTemplate, httperror.HTTPError)
• func ListSSHTemplates(storage backend.Storage) (types.TemplateListResponse, httperror.HTTPError)
• func ValidateAllowedCriticalOptions(allowedCOs []types.SSHCriticalOptions, requestCOs []types.SSHCriticalOptions) error
• func ValidateAllowedExtensions(allowedExts []string, requestExts []string) error
• func ValidateAllowedHosts(allowedHosts []string, requestHosts []string) error
• func ValidateAllowedPrincipals(allowedPrincipals []string, requestPrincipals []string) error
• func ValidateRequestHosts(hosts []string) error
• func ValidateRequestPrincipals(principals []string) error

Functions

func CreateSSHCertificate

func CreateSSHCertificate(certReq types.SSHSignRequest, storage backend.Storage) (types.SSHCertificate, httperror.HTTPError)

CreateSSHCertificate Accepts a request with an authorized key public key, signs it with the intermediate CA key and returns the SSH certificate to the requestor

func CreateSSHTemplate

func CreateSSHTemplate(template types.SSHTemplate, storage backend.Storage) httperror.HTTPError

CreateSSHTemplate Validates the HTTP request data and creates a new SSH template based on the critera defined in `template` and writes it tothe storage backend

func DeleteSSHTemplate

func DeleteSSHTemplate(templateName string, storage backend.Storage) httperror.HTTPError

DeleteSSHTemplate Deletes the SSH template requested by `templateName` from the storage backend

func GetSSHTemplate

func GetSSHTemplate(templateName string, storage backend.Storage) (types.SSHTemplate, httperror.HTTPError)

GetSSHTemplate Retrieves the SSH template defined by `templateName` from the storage backend and returns it to the HTTP controller function

func ListSSHTemplates

func ListSSHTemplates(storage backend.Storage) (types.TemplateListResponse, httperror.HTTPError)

ListSSHTemplates Collects a list of all available SSH templates from the storage backend

func ValidateAllowedCriticalOptions

func ValidateAllowedCriticalOptions(allowedCOs []types.SSHCriticalOptions, requestCOs []types.SSHCriticalOptions) error

ValidateAllowedCriticalOptions Validates that all critical options sent in a CreateSSHCertificate request are permitted by the template that they are being created against

func ValidateAllowedExtensions

func ValidateAllowedExtensions(allowedExts []string, requestExts []string) error

ValidateAllowedExtensions Validates that all extensions sent in a CreateSSHCertificate request are permitted by the template that they are being created against

func ValidateAllowedHosts

func ValidateAllowedHosts(allowedHosts []string, requestHosts []string) error

ValidateAllowedHosts Validates that all hostnames sent in a CreateSSHCertificate request are permitted by the template that they are being created against

func ValidateAllowedPrincipals

func ValidateAllowedPrincipals(allowedPrincipals []string, requestPrincipals []string) error

ValidateAllowedPrincipals Validates that all Principals sent in a CreateSSHCertificate request are permitted by the template that they are being created against

func ValidateRequestHosts

func ValidateRequestHosts(hosts []string) error

ValidateRequestHosts Loops through all the hostname values sent in HTTP request to ensure they meet the criteria of either being a hostname or username

func ValidateRequestPrincipals

func ValidateRequestPrincipals(principals []string) error

ValidateRequestPrincipals Loops through all the Principal values sent in HTTP request to ensure they meet the criteria of either being a hostname or username