cert

Documentation

Index

• func CreateCertificate(principal string, certType uint32) (*ssh.Certificate, ssh.Signer, error)
• func CreateEllipticCertificate(principal string, certType uint32) (*ssh.Certificate, ssh.Signer, error)
• type Credentials
  • func GenerateSelfSignedCert(hostNames []string, ipAddresses []string, eku ...x509.ExtKeyUsage) (*Credentials, error)

Functions

func CreateCertificate

func CreateCertificate(principal string, certType uint32) (*ssh.Certificate, ssh.Signer, error)

CreateCertificate creates a valid 2048-bit RSA certificate.

func CreateEllipticCertificate

func CreateEllipticCertificate(principal string, certType uint32) (*ssh.Certificate, ssh.Signer, error)

CreateEllipticCertificate creates a valid, but not supported, ECDSA SSH certificate. This certificate is used to make sure Teleport rejects such certificates.

Types

type Credentials

type Credentials struct {
	// PublicKey in PEM format
	PublicKey []byte
	// PrivateKey in PEM format
	PrivateKey []byte
	Cert       []byte
}

Credentials keeps the typical 3 components of a proper TLS configuration

func GenerateSelfSignedCert

func GenerateSelfSignedCert(hostNames []string, ipAddresses []string, eku ...x509.ExtKeyUsage) (*Credentials, error)

GenerateSelfSignedCert generates a self-signed certificate that is valid for given domain names and IPs. If extended key usage is not specified, the cert will be generated for server auth.