policy

May 26, 2022

Changes in this version

+ const HostPolicyEngineType

+ const UserPolicyEngineType

+ type Engine struct

+ func New(options *Options) (*Engine, error)

+ func (e *Engine) AreSANsAllowed(sans []string) error

+ func (e *Engine) IsSSHCertificateAllowed(cert *ssh.Certificate) error

+ func (e *Engine) IsX509CertificateAllowed(cert *x509.Certificate) error

+ type HostPolicy policy.SSHNamePolicyEngine

+ func NewSSHHostPolicyEngine(policyOptions SSHPolicyOptionsInterface) (HostPolicy, error)

+ type Options struct

+ SSH *SSHPolicyOptions

+ X509 *X509PolicyOptions

+ func LinkedToCertificates(p *linkedca.Policy) *Options

+ func (o *Options) GetSSHOptions() *SSHPolicyOptions

+ func (o *Options) GetX509Options() *X509PolicyOptions

+ type SSHHostCertificateOptions SSHUserCertificateOptions

+ type SSHNameOptions struct

+ DNSDomains []string

+ EmailAddresses []string

+ IPRanges []string

+ Principals []string

+ func (o *SSHNameOptions) HasNames() bool

+ type SSHPolicyOptions struct

+ Host *SSHHostCertificateOptions

+ User *SSHUserCertificateOptions

+ func (o *SSHPolicyOptions) GetAllowedHostNameOptions() *SSHNameOptions

+ func (o *SSHPolicyOptions) GetAllowedUserNameOptions() *SSHNameOptions

+ func (o *SSHPolicyOptions) GetDeniedHostNameOptions() *SSHNameOptions

+ func (o *SSHPolicyOptions) GetDeniedUserNameOptions() *SSHNameOptions

+ type SSHPolicyOptionsInterface interface

+ GetAllowedHostNameOptions func() *SSHNameOptions

+ GetAllowedUserNameOptions func() *SSHNameOptions

+ GetDeniedHostNameOptions func() *SSHNameOptions

+ GetDeniedUserNameOptions func() *SSHNameOptions

+ type SSHUserCertificateOptions struct

+ AllowedNames *SSHNameOptions

+ DeniedNames *SSHNameOptions

+ func (o *SSHUserCertificateOptions) GetAllowedNameOptions() *SSHNameOptions

+ func (o *SSHUserCertificateOptions) GetDeniedNameOptions() *SSHNameOptions

+ type UserPolicy policy.SSHNamePolicyEngine

+ func NewSSHUserPolicyEngine(policyOptions SSHPolicyOptionsInterface) (UserPolicy, error)

+ type X509NameOptions struct

+ CommonNames []string

+ DNSDomains []string

+ EmailAddresses []string

+ IPRanges []string

+ URIDomains []string

+ func (o *X509NameOptions) HasNames() bool

+ type X509Policy policy.X509NamePolicyEngine

+ func NewX509PolicyEngine(policyOptions X509PolicyOptionsInterface) (X509Policy, error)

+ type X509PolicyOptions struct

+ AllowWildcardNames bool

+ AllowedNames *X509NameOptions

+ DeniedNames *X509NameOptions

+ func (o *X509PolicyOptions) AreWildcardNamesAllowed() bool

+ func (o *X509PolicyOptions) GetAllowedNameOptions() *X509NameOptions

+ func (o *X509PolicyOptions) GetDeniedNameOptions() *X509NameOptions

+ type X509PolicyOptionsInterface interface

+ AreWildcardNamesAllowed func() bool

+ GetAllowedNameOptions func() *X509NameOptions

+ GetDeniedNameOptions func() *X509NameOptions