deviceattest01

Documentation

Index

• Constants
• func Setup(keyAuth string, akAttrs *keystore.KeyAttributes, format AttestationFormat, ...) ([]byte, error)
• func Verify(resolver *net.Resolver, ca ca.CertificateAuthority, ...) error
• type AttestationFormat
  • func (format AttestationFormat) String() string
• type AttestationObject
• type AttestationStatement

Constants

const (
	FormatTPM = "tpm"
)

Functions

func Setup

func Setup(
	keyAuth string,
	akAttrs *keystore.KeyAttributes,
	format AttestationFormat,
	tpm tpm2.TrustedPlatformModule) ([]byte, error)

Generates an attestation statement for the device-attest-01 challenge. https://datatracker.ietf.org/doc/draft-acme-device-attest https://www.w3.org/TR/webauthn/#sctn-tpm-attestation

func Verify

func Verify(
	resolver *net.Resolver,
	ca ca.CertificateAuthority,
	domain, port, challengeToken, expectedKeyAuth string) error

Verifies the device-attest-01 challenge Implements acme.ChallengeVerifierFunc

Types

type AttestationFormat

type AttestationFormat string

func (AttestationFormat) String

func (format AttestationFormat) String() string

type AttestationObject

type AttestationObject struct {
	Format       string               `json:"fmt"`
	AttStatement AttestationStatement `json:"attStmt,omitempty"`
}

type AttestationStatement

type AttestationStatement struct {
	Ver      string        `json:"ver"`
	Alg      int64         `json:"alg"`
	X5c      []interface{} `json:"x5c"`
	Sig      []byte        `json:"sig"`
	CertInfo []byte        `json:"certInfo"`
	PubArea  []byte        `json:"pubArea"`
}