pki

Documentation

Index

• Constants
• func AddCACommonFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema
• func AddCAIssueFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema
• func AddCAKeyGenerationFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema
• func AddNonCACommonFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema
• func BuildCRL(ctx context.Context, b *PkiBackend, req *logical.Request, forceNew bool) error
• func ConvertRespToPKCS8(resp *logical.Response) error
• func FetchCAInfo(ctx context.Context, req *logical.Request) (*certutil.CAInfoBundle, error)
• func FetchCertBySerial(ctx context.Context, req *logical.Request, prefix, serial string) (*logical.StorageEntry, error)
• func GenerateConvertedCreationBundle(b *backend, data *InputBundleA, caSign *certutil.CAInfoBundle, ...) (*certutil.CreationBundle, error)
• func GenerateCreationBundle(b *backend, data *inputBundle, caSign *certutil.CAInfoBundle, ...) (*certutil.CreationBundle, error)
• func GenerateIntermediateCSR(b *backend, data *InputBundleA) (*certutil.ParsedCSRBundle, error)
• func GetFormat(data *framework.FieldData) string
• func GetURLs(ctx context.Context, req *logical.Request) (*certutil.URLEntries, error)
• func NormalizeSerial(serial string) string
• func PathConfigCRL(b *backend) *framework.Path
• func PathConfigURLs(b *backend) *framework.Path
• func PathFetchCA(b *backend) *framework.Path
• func PathFetchCAChain(b *backend) *framework.Path
• func PathFetchCRL(b *backend) *framework.Path
• func PathFetchCRLViaCertPath(b *backend) *framework.Path
• func PathFetchListCerts(b *backend) *framework.Path
• func PathFetchValid(b *backend) *framework.Path
• func PathListRoles(b *backend) *framework.Path
• func PathRoles(b *backend) *framework.Path
• func SecretCerts(b *backend) *framework.Secret
• type InputBundleA
• type InputBundleB
• type PkiBackend
  • func (b *PkiBackend) CreateTidyCASGuard()
  • func (b *PkiBackend) GetCrlLifetime() time.Duration
  • func (b *PkiBackend) GetGenerationParams(data *framework.FieldData) (exported bool, format string, role *roleEntry, errorResp *logical.Response)
  • func (b *PkiBackend) GetRevokeStorageLock() *sync.RWMutex
  • func (b *PkiBackend) GetRole(ctx context.Context, s logical.Storage, n string) (*RoleEntry, error)
  • func (b *PkiBackend) GetStorage() logical.Storage
  • func (b *PkiBackend) GetTidyCASGuard() *uint32
  • func (b *PkiBackend) SetCrlLifetime(crlLifetime time.Duration)
  • func (b *PkiBackend) SetStorage(storage logical.Storage)
• type RoleEntry
  • func GenRoleEntry() *RoleEntry
  • func (r RoleEntry) ToResponseData() map[string]interface{}

Constants

const SecretCertsType = "pki"

SecretCertsType is the name used to identify this type

Functions

func AddCACommonFields

func AddCACommonFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema

func AddCAIssueFields

func AddCAIssueFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema

func AddCAKeyGenerationFields

func AddCAKeyGenerationFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema

func AddNonCACommonFields

func AddNonCACommonFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema

func BuildCRL

func BuildCRL(ctx context.Context, b *PkiBackend, req *logical.Request, forceNew bool) error

func ConvertRespToPKCS8

func ConvertRespToPKCS8(resp *logical.Response) error

func FetchCAInfo

func FetchCAInfo(ctx context.Context, req *logical.Request) (*certutil.CAInfoBundle, error)

func FetchCertBySerial

func FetchCertBySerial(ctx context.Context, req *logical.Request, prefix, serial string) (*logical.StorageEntry, error)

func GenerateConvertedCreationBundle

func GenerateConvertedCreationBundle(b *backend, data *InputBundleA, caSign *certutil.CAInfoBundle, csr *x509.CertificateRequest) (*certutil.CreationBundle, error)

func GenerateCreationBundle

func GenerateCreationBundle(b *backend, data *inputBundle, caSign *certutil.CAInfoBundle, csr *x509.CertificateRequest) (*certutil.CreationBundle, error)

func GenerateIntermediateCSR

func GenerateIntermediateCSR(b *backend, data *InputBundleA) (*certutil.ParsedCSRBundle, error)

func GetFormat

func GetFormat(data *framework.FieldData) string

func GetURLs

func GetURLs(ctx context.Context, req *logical.Request) (*certutil.URLEntries, error)

func NormalizeSerial

func NormalizeSerial(serial string) string

func PathConfigCRL

func PathConfigCRL(b *backend) *framework.Path

func PathConfigURLs

func PathConfigURLs(b *backend) *framework.Path

func PathFetchCA

func PathFetchCA(b *backend) *framework.Path

func PathFetchCAChain

func PathFetchCAChain(b *backend) *framework.Path

func PathFetchCRL

func PathFetchCRL(b *backend) *framework.Path

func PathFetchCRLViaCertPath

func PathFetchCRLViaCertPath(b *backend) *framework.Path

func PathFetchListCerts

func PathFetchListCerts(b *backend) *framework.Path

func PathFetchValid

func PathFetchValid(b *backend) *framework.Path

func PathListRoles

func PathListRoles(b *backend) *framework.Path

func PathRoles

func PathRoles(b *backend) *framework.Path

func SecretCerts

func SecretCerts(b *backend) *framework.Secret

Types

type InputBundleA

type InputBundleA struct {
	Role    *RoleEntry
	Req     *logical.Request
	ApiData *framework.FieldData
}

type InputBundleB

type InputBundleB struct {
	// contains filtered or unexported fields
}

type PkiBackend

type PkiBackend struct {
	Backend backend
}

func (*PkiBackend) CreateTidyCASGuard

func (b *PkiBackend) CreateTidyCASGuard()

func (*PkiBackend) GetCrlLifetime

func (b *PkiBackend) GetCrlLifetime() time.Duration

func (*PkiBackend) GetGenerationParams

func (b *PkiBackend) GetGenerationParams(data *framework.FieldData) (exported bool, format string, role *roleEntry, errorResp *logical.Response)

func (*PkiBackend) GetRevokeStorageLock

func (b *PkiBackend) GetRevokeStorageLock() *sync.RWMutex

func (*PkiBackend) GetRole

func (b *PkiBackend) GetRole(ctx context.Context, s logical.Storage, n string) (*RoleEntry, error)

func (*PkiBackend) GetStorage

func (b *PkiBackend) GetStorage() logical.Storage

func (*PkiBackend) GetTidyCASGuard

func (b *PkiBackend) GetTidyCASGuard() *uint32

func (*PkiBackend) SetCrlLifetime

func (b *PkiBackend) SetCrlLifetime(crlLifetime time.Duration)

func (*PkiBackend) SetStorage

func (b *PkiBackend) SetStorage(storage logical.Storage)

type RoleEntry

type RoleEntry struct {
	// contains filtered or unexported fields
}

func GenRoleEntry

func GenRoleEntry() *RoleEntry

func (RoleEntry) ToResponseData

func (r RoleEntry) ToResponseData() map[string]interface{}