security

Documentation

Index

• func ClientTLSConfig(certPEM, keyPEM []byte, expectedFingerprint string) (*tls.Config, error)
• func FingerprintCert(cert *x509.Certificate) string
• func FingerprintDER(der []byte) string
• func FingerprintPEM(certPEM []byte) (string, error)
• func GenerateCSRFromKey(keyPEM []byte, label string) ([]byte, error)
• func GenerateClientIdentity(label string) (certPEM, keyPEM, csrPEM []byte, err error)
• func HostIdentityFingerprint(caCertPEM []byte) (string, error)
• func ServerTLSConfig(pki HostPKI) (*tls.Config, string, error)
• func ShortFingerprint(fp string) string
• func SignClientCSR(caCertPEM, caKeyPEM, csrPEM []byte, label string) ([]byte, string, error)
• type HostPKI
  • func EnsureHostPKI(stateDir, serverName string) (HostPKI, error)

Functions

func ClientTLSConfig

func ClientTLSConfig(certPEM, keyPEM []byte, expectedFingerprint string) (*tls.Config, error)

func FingerprintCert

func FingerprintCert(cert *x509.Certificate) string

func FingerprintDER

func FingerprintDER(der []byte) string

func FingerprintPEM

func FingerprintPEM(certPEM []byte) (string, error)

func GenerateCSRFromKey

func GenerateCSRFromKey(keyPEM []byte, label string) ([]byte, error)

func GenerateClientIdentity

func GenerateClientIdentity(label string) (certPEM, keyPEM, csrPEM []byte, err error)

func HostIdentityFingerprint

func HostIdentityFingerprint(caCertPEM []byte) (string, error)

func ServerTLSConfig

func ServerTLSConfig(pki HostPKI) (*tls.Config, string, error)

func ShortFingerprint

func ShortFingerprint(fp string) string

func SignClientCSR

func SignClientCSR(caCertPEM, caKeyPEM, csrPEM []byte, label string) ([]byte, string, error)

Types

type HostPKI

type HostPKI struct {
	CACertPEM     []byte
	CAKeyPEM      []byte
	ServerCertPEM []byte
	ServerKeyPEM  []byte
}

func EnsureHostPKI

func EnsureHostPKI(stateDir, serverName string) (HostPKI, error)