ca

Documentation

Index

• func NewCAMetrics(stats prometheus.Registerer) *caMetrics
• func NewCRLImpl(issuers []*issuance.Issuer, profileConfig issuance.CRLProfileConfig, ...) (*crlImpl, error)
• func NewCertificateAuthorityImpl(sa sapb.StorageAuthorityCertificateClient, sctService rapb.SCTProviderClient, ...) (*certificateAuthorityImpl, error)

Functions

func NewCAMetrics

func NewCAMetrics(stats prometheus.Registerer) *caMetrics

func NewCRLImpl

func NewCRLImpl(
	issuers []*issuance.Issuer,
	profileConfig issuance.CRLProfileConfig,
	maxLogLen int,
	logger blog.Logger,
	metrics *caMetrics,
) (*crlImpl, error)

NewCRLImpl returns a new object which fulfils the ca.proto CRLGenerator interface. It uses the list of issuers to determine what issuers it can issue CRLs from. lifetime sets the validity period (inclusive) of the resulting CRLs.

func NewCertificateAuthorityImpl

func NewCertificateAuthorityImpl(
	sa sapb.StorageAuthorityCertificateClient,
	sctService rapb.SCTProviderClient,
	pa core.PolicyAuthority,
	boulderIssuers []*issuance.Issuer,
	certificateProfiles map[string]*issuance.ProfileConfig,
	serialPrefix byte,
	maxNames int,
	keyPolicy goodkey.KeyPolicy,
	logger blog.Logger,
	metrics *caMetrics,
	clk clock.Clock,
) (*certificateAuthorityImpl, error)

NewCertificateAuthorityImpl creates a CA instance that can sign certificates from any number of issuance.Issuers according to their profiles, and can sign OCSP (via delegation to an ocspImpl and its issuers).