ca

Documentation

Index

• type DeviceEstService
  • func NewEstService(devicesDb devicesStore.DB, caClient *http.Client, caUrl string, ...) *DeviceEstService
  • func (ca *DeviceEstService) CACerts(ctx context.Context, aps string, req *http.Request) ([]*x509.Certificate, error)
  • func (ca *DeviceEstService) CSRAttrs(ctx context.Context, aps string, r *http.Request) (est.CSRAttrs, error)
  • func (ca *DeviceEstService) Enroll(ctx context.Context, csr *x509.CertificateRequest, aps string, r *http.Request) (*x509.Certificate, error)
  • func (ca *DeviceEstService) Reenroll(ctx context.Context, cert *x509.Certificate, csr *x509.CertificateRequest, ...) (*x509.Certificate, error)
  • func (ca *DeviceEstService) ServerKeyGen(ctx context.Context, csr *x509.CertificateRequest, aps string, r *http.Request) (*x509.Certificate, []byte, error)
  • func (ca *DeviceEstService) TPMEnroll(ctx context.Context, csr *x509.CertificateRequest, ekcerts []*x509.Certificate, ...) ([]byte, []byte, []byte, error)

Types

type DeviceEstService

type DeviceEstService struct {
	// contains filtered or unexported fields
}

func NewEstService

func NewEstService(devicesDb devicesStore.DB, caClient *http.Client, caUrl string, keycloakClient *http.Client, keycloakUrl string, keycloakClientId string, keycloakClientSecret string, minReenrollDays int, logger log.Logger) *DeviceEstService

func (*DeviceEstService) CACerts

func (ca *DeviceEstService) CACerts(ctx context.Context, aps string, req *http.Request) ([]*x509.Certificate, error)

func (*DeviceEstService) CSRAttrs

func (ca *DeviceEstService) CSRAttrs(ctx context.Context, aps string, r *http.Request) (est.CSRAttrs, error)

func (*DeviceEstService) Enroll

func (ca *DeviceEstService) Enroll(ctx context.Context, csr *x509.CertificateRequest, aps string, r *http.Request) (*x509.Certificate, error)

func (*DeviceEstService) Reenroll

func (ca *DeviceEstService) Reenroll(ctx context.Context, cert *x509.Certificate, csr *x509.CertificateRequest, aps string, r *http.Request) (*x509.Certificate, error)

func (*DeviceEstService) ServerKeyGen

func (ca *DeviceEstService) ServerKeyGen(ctx context.Context, csr *x509.CertificateRequest, aps string, r *http.Request) (*x509.Certificate, []byte, error)

func (*DeviceEstService) TPMEnroll

func (ca *DeviceEstService) TPMEnroll(ctx context.Context, csr *x509.CertificateRequest, ekcerts []*x509.Certificate, ekPub, akPub []byte, aps string, r *http.Request) ([]byte, []byte, []byte, error)