pkg

package

Go to main page

Versions in this module

v0

v0.16.0

Jan 12, 2021

Changes in this version

+ const CACertificateQualifier

+ const MinECKeySize

+ const MinRSAKeySize

+ const OAuthCertificateQualifier

+ var ErrUnsupportedSigningKey = errors.New("signing key algorithm not supported")

+ func SignJWT(signer crypto.Signer, claims map[string]interface{}, ...) (sig string, err error)

type Client

+ SignJWTRFC003 func(claims map[string]interface{}) (string, error)

+ SignTLSCertificate func(publicKey crypto.PublicKey) (*x509.Certificate, error)

type Crypto

+ func (client *Crypto) SignJWTRFC003(claims map[string]interface{}) (token string, err error)

+ func (client *Crypto) SignTLSCertificate(key crypto.PublicKey) (*x509.Certificate, error)

v0.15.0

Sep 29, 2020

Changes in this version

+ const SigningCertificateQualifier

+ const SigningCertificateValidityInDays

+ const TLSCertificateQualifier

+ var ErrKeyAlreadyExists = errors.New("key already exists")

type Client

+ GenerateVendorCACSR func(name string) ([]byte, error)

+ GetSigningCertificate func(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ RenewSigningCertificate func(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ RenewTLSCertificate func(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ SelfSignVendorCACertificate func(name string) (*x509.Certificate, error)

+ SignJWS func(payload []byte, key types.KeyIdentifier) ([]byte, error)

+ StoreVendorCACertificate func(certificate *x509.Certificate) error

type Crypto

+ func NewCryptoInstance(config CryptoConfig) *Crypto

+ func NewTestCryptoInstance(testDirectory string) *Crypto

+ func (client *Crypto) GenerateVendorCACSR(name string) ([]byte, error)

+ func (client *Crypto) GetSigningCertificate(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ func (client *Crypto) RenewSigningCertificate(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ func (client *Crypto) RenewTLSCertificate(entity types.LegalEntity) (*x509.Certificate, crypto.PrivateKey, error)

+ func (client *Crypto) SelfSignVendorCACertificate(name string) (*x509.Certificate, error)

+ func (client *Crypto) Shutdown() error

+ func (client *Crypto) Start() error

+ func (client *Crypto) StoreVendorCACertificate(certificate *x509.Certificate) error

+ func (client Crypto) SignJWS(payload []byte, key types.KeyIdentifier) ([]byte, error)

type CryptoConfig

+ Address string

+ ClientTimeout int

+ Mode string

+ func DefaultCryptoConfig() CryptoConfig

+ func TestCryptoConfig(testDirectory string) CryptoConfig

v0.14.0

Jun 22, 2020

Changes in this version

+ const TLSCertificateValidityInDays

+ var ErrInvalidKeyIdentifier = core.NewError("invalid key identifier", false)

type CertificateProfile

+ ExtKeyUsage []x509.ExtKeyUsage

type Client

+ CalculateExternalId func(subject string, actor string, key types.KeyIdentifier) ([]byte, error)

+ DecryptKeyAndCipherText func(cipherText types.DoubleEncryptedCipherText, key types.KeyIdentifier) ([]byte, error)

+ EncryptKeyAndPlainText func(plainText []byte, keys []jwk.Key) (types.DoubleEncryptedCipherText, error)

+ GenerateKeyPair func(key types.KeyIdentifier) (crypto.PublicKey, error)

+ GetPrivateKey func(key types.KeyIdentifier) (crypto.Signer, error)

+ GetPublicKeyAsJWK func(key types.KeyIdentifier) (jwk.Key, error)

+ GetPublicKeyAsPEM func(key types.KeyIdentifier) (string, error)

+ GetTLSCertificate func(caKey types.KeyIdentifier) (*x509.Certificate, crypto.PrivateKey, error)

+ PrivateKeyExists func(key types.KeyIdentifier) bool

+ Sign func(data []byte, key types.KeyIdentifier) ([]byte, error)

+ SignJWSEphemeral func(payload []byte, caKey types.KeyIdentifier, csr x509.CertificateRequest, ...) ([]byte, error)

+ SignJWT func(claims map[string]interface{}, key types.KeyIdentifier) (string, error)

+ TrustStore func() cert.TrustStore

type Crypto

+ func (client *Crypto) CalculateExternalId(subject string, actor string, key types.KeyIdentifier) ([]byte, error)

+ func (client *Crypto) DecryptKeyAndCipherText(cipherText types.DoubleEncryptedCipherText, key types.KeyIdentifier) ([]byte, error)

+ func (client *Crypto) EncryptKeyAndPlainText(plainText []byte, keys []jwk.Key) (types.DoubleEncryptedCipherText, error)

+ func (client *Crypto) GenerateKeyPair(key types.KeyIdentifier) (crypto.PublicKey, error)

+ func (client *Crypto) GetPrivateKey(key types.KeyIdentifier) (crypto.Signer, error)

+ func (client *Crypto) GetPublicKeyAsJWK(key types.KeyIdentifier) (jwk.Key, error)

+ func (client *Crypto) GetPublicKeyAsPEM(key types.KeyIdentifier) (string, error)

+ func (client *Crypto) GetTLSCertificate(caKey types.KeyIdentifier) (*x509.Certificate, crypto.PrivateKey, error)

+ func (client *Crypto) PrivateKeyExists(key types.KeyIdentifier) bool

+ func (client *Crypto) Sign(data []byte, key types.KeyIdentifier) ([]byte, error)

+ func (client *Crypto) SignJWT(claims map[string]interface{}, key types.KeyIdentifier) (string, error)

+ func (client Crypto) SignJWSEphemeral(payload []byte, caKey types.KeyIdentifier, csr x509.CertificateRequest, ...) ([]byte, error)

+ func (client Crypto) TrustStore() cert.TrustStore

v0.13.2

Apr 2, 2020

v0.13.1

Apr 2, 2020

v0.13.0

Mar 30, 2020

Changes in this version

+ const MinKeySize

+ const ModuleName

+ var ErrCSRSignatureInvalid = core.NewError("CSR signature is invalid", false)

+ var ErrCertificateNotTrusted = errors.New("X.509 certificate not trusted")

+ var ErrCertificateNotValidAtSigningTime = errors.New("X.509 certificate was not valid at the time of signing")

+ var ErrIllegalNonce = core.NewError("illegal nonce given", false)

+ var ErrInvalidAlgorithm = core.NewError("invalid algorithm for public key", false)

+ var ErrInvalidCertChain = errors.New("X.509 certificate chain is invalid")

+ var ErrInvalidKeySize = core.NewError(fmt.Sprintf("invalid keySize, needs to be at least %d bits", MinKeySize), ...)

+ var ErrMissingActor = core.NewError("missing actor", false)

+ var ErrMissingLegalEntityURI = core.NewError("missing legalEntity URI", false)

+ var ErrMissingSubject = core.NewError("missing subject", false)

+ var ErrRsaPubKeyConversion = core.NewError("Unable to convert public key to RSA public key", false)

+ var ErrUnableToParseCSR = core.NewError("unable to parse CSR", false)

+ var ErrUnknownCA = core.NewError("unknown CA", false)

+ var ErrWrongPublicKey = core.NewError("failed to decode PEM block containing public key, key is of the wrong type", ...)

+ func CertificateToJWK(cert *x509.Certificate) (jwk.Key, error)

+ func GetX509ChainFromHeaders(headers jwkHeaderReader) ([]*x509.Certificate, error)

+ func JwkToMap(key jwk.Key) (map[string]interface{}, error)

+ func MapToJwk(jwkAsMap map[string]interface{}) (jwk.Key, error)

+ func MapToX509CertChain(jwkAsMap map[string]interface{}) ([]*x509.Certificate, error)

+ func MapsToJwkSet(maps []map[string]interface{}) (*jwk.Set, error)

+ func PemToJwk(pub []byte) (jwk.Key, error)

+ func PemToPublicKey(pub []byte) (*rsa.PublicKey, error)

+ func PublicKeyToPem(pub *rsa.PublicKey) (string, error)

+ func ValidateJWK(maps ...interface{}) error

+ type CertificateProfile struct

+ IsCA bool

+ KeyUsage x509.KeyUsage

+ MaxPathLen int

+ NumDaysValid int

+ type CertificateVerifier interface

+ Verify func(*x509.Certificate) error

+ type Client interface

+ DecryptKeyAndCipherTextFor func(cipherText types.DoubleEncryptedCipherText, legalEntity types.LegalEntity) ([]byte, error)

+ EncryptKeyAndPlainTextWith func(plainText []byte, keys []jwk.Key) (types.DoubleEncryptedCipherText, error)

+ ExternalIdFor func(subject string, actor string, entity types.LegalEntity) ([]byte, error)

+ GenerateKeyPairFor func(legalEntity types.LegalEntity) error

+ GetOpaquePrivateKey func(entity types.LegalEntity) (crypto.Signer, error)

+ JWSSignEphemeral func(payload []byte, ca types.LegalEntity, csr x509.CertificateRequest, ...) ([]byte, error)

+ KeyExistsFor func(legalEntity types.LegalEntity) bool

+ PublicKeyInJWK func(legalEntity types.LegalEntity) (jwk.Key, error)

+ PublicKeyInPEM func(legalEntity types.LegalEntity) (string, error)

+ SignCertificate func(entity types.LegalEntity, ca types.LegalEntity, pkcs10 []byte, ...) ([]byte, error)

+ SignFor func(data []byte, legalEntity types.LegalEntity) ([]byte, error)

+ SignJwtFor func(claims map[string]interface{}, legalEntity types.LegalEntity) (string, error)

+ VerifyJWS func(signature []byte, signingTime time.Time, certVerifier CertificateVerifier) ([]byte, error)

+ VerifyWith func(data []byte, sig []byte, jwk jwk.Key) (bool, error)

+ func NewCryptoClient() Client

+ type Crypto struct

+ Config CryptoConfig

+ Storage storage.Storage

+ func CryptoInstance() *Crypto

+ func (client *Crypto) Configure() error

+ func (client *Crypto) DecryptKeyAndCipherTextFor(cipherText types.DoubleEncryptedCipherText, legalEntity types.LegalEntity) ([]byte, error)

+ func (client *Crypto) EncryptKeyAndPlainTextWith(plainText []byte, keys []jwk.Key) (types.DoubleEncryptedCipherText, error)

+ func (client *Crypto) ExternalIdFor(subject string, actor string, entity types.LegalEntity) ([]byte, error)

+ func (client *Crypto) GenerateKeyPairFor(legalEntity types.LegalEntity) error

+ func (client *Crypto) GetOpaquePrivateKey(entity types.LegalEntity) (crypto.Signer, error)

+ func (client *Crypto) KeyExistsFor(legalEntity types.LegalEntity) bool

+ func (client *Crypto) PublicKeyInJWK(legalEntity types.LegalEntity) (jwk.Key, error)

+ func (client *Crypto) PublicKeyInPEM(legalEntity types.LegalEntity) (string, error)

+ func (client *Crypto) SignCertificate(entity types.LegalEntity, ca types.LegalEntity, pkcs10 []byte, ...) ([]byte, error)

+ func (client *Crypto) SignFor(data []byte, legalEntity types.LegalEntity) ([]byte, error)

+ func (client *Crypto) SignJwtFor(claims map[string]interface{}, legalEntity types.LegalEntity) (string, error)

+ func (client *Crypto) VerifyJWS(signature []byte, signingTime time.Time, certVerifier CertificateVerifier) ([]byte, error)

+ func (client *Crypto) VerifyWith(data []byte, sig []byte, key jwk.Key) (bool, error)

+ func (client Crypto) JWSSignEphemeral(payload []byte, ca types.LegalEntity, csr x509.CertificateRequest, ...) ([]byte, error)

+ type CryptoConfig struct

+ Fspath string

+ Keysize int

+ Storage string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL