ca

Mar 29, 2024

Changes in this version

type Option

+ func WithTLSConfig(t *tls.Config) Option

+ func WithX509CAService(svc apiv1.CertificateAuthorityService) Option

Jan 10, 2023

Changes in this version

+ var ErrAdminAPINotAuthorized = errors.New("admin API not authorized")

+ var ErrAdminAPINotImplemented = errors.New("admin API not implemented")

type AdminClient

+ func (c *AdminClient) IsEnabled() error

type Client

+ func (c *Client) FederationWithContext(ctx context.Context) (*api.FederationResponse, error)

+ func (c *Client) HealthWithContext(ctx context.Context) (*api.HealthResponse, error)

+ func (c *Client) ProvisionerKeyWithContext(ctx context.Context, kid string) (*api.ProvisionerKeyResponse, error)

+ func (c *Client) ProvisionersWithContext(ctx context.Context, opts ...ProvisionerOption) (*api.ProvisionersResponse, error)

+ func (c *Client) RekeyWithContext(ctx context.Context, req *api.RekeyRequest, tr http.RoundTripper) (*api.SignResponse, error)

+ func (c *Client) RenewWithContext(ctx context.Context, tr http.RoundTripper) (*api.SignResponse, error)

+ func (c *Client) RenewWithTokenAndContext(ctx context.Context, token string) (*api.SignResponse, error)

+ func (c *Client) RevokeWithContext(ctx context.Context, req *api.RevokeRequest, tr http.RoundTripper) (*api.RevokeResponse, error)

+ func (c *Client) RootFingerprintWithContext(ctx context.Context) (string, error)

+ func (c *Client) RootWithContext(ctx context.Context, sha256Sum string) (*api.RootResponse, error)

+ func (c *Client) RootsWithContext(ctx context.Context) (*api.RootsResponse, error)

+ func (c *Client) SSHBastionWithContext(ctx context.Context, req *api.SSHBastionRequest) (*api.SSHBastionResponse, error)

+ func (c *Client) SSHCheckHostWithContext(ctx context.Context, principal, token string) (*api.SSHCheckPrincipalResponse, error)

+ func (c *Client) SSHConfigWithContext(ctx context.Context, req *api.SSHConfigRequest) (*api.SSHConfigResponse, error)

+ func (c *Client) SSHFederationWithContext(ctx context.Context) (*api.SSHRootsResponse, error)

+ func (c *Client) SSHGetHostsWithContext(ctx context.Context) (*api.SSHGetHostsResponse, error)

+ func (c *Client) SSHRekeyWithContext(ctx context.Context, req *api.SSHRekeyRequest) (*api.SSHRekeyResponse, error)

+ func (c *Client) SSHRenewWithContext(ctx context.Context, req *api.SSHRenewRequest) (*api.SSHRenewResponse, error)

+ func (c *Client) SSHRevokeWithContext(ctx context.Context, req *api.SSHRevokeRequest) (*api.SSHRevokeResponse, error)

+ func (c *Client) SSHRootsWithContext(ctx context.Context) (*api.SSHRootsResponse, error)

+ func (c *Client) SSHSignWithContext(ctx context.Context, req *api.SSHSignRequest) (*api.SSHSignResponse, error)

+ func (c *Client) SignWithContext(ctx context.Context, req *api.SignRequest) (*api.SignResponse, error)

+ func (c *Client) VersionWithContext(ctx context.Context) (*api.VersionResponse, error)

Nov 11, 2022

Changes in this version

type ACMEClient

+ func (c *ACMEClient) ValidateWithPayload(url string, payload []byte) error

type AdminClient

+ func (c *AdminClient) CreateProvisionerWebhook(provisionerName string, wh *linkedca.Webhook) (*linkedca.Webhook, error)

+ func (c *AdminClient) DeleteProvisionerWebhook(provisionerName, webhookName string) error

+ func (c *AdminClient) UpdateProvisionerWebhook(provisionerName string, wh *linkedca.Webhook) (*linkedca.Webhook, error)

May 26, 2022

Changes in this version

type AdminClient

+ func (c *AdminClient) CreateACMEPolicy(provisionerName, reference, keyID string, p *linkedca.Policy) (*linkedca.Policy, error)

+ func (c *AdminClient) CreateAuthorityPolicy(p *linkedca.Policy) (*linkedca.Policy, error)

+ func (c *AdminClient) CreateProvisionerPolicy(provisionerName string, p *linkedca.Policy) (*linkedca.Policy, error)

+ func (c *AdminClient) GetACMEPolicy(provisionerName, reference, keyID string) (*linkedca.Policy, error)

+ func (c *AdminClient) GetAuthorityPolicy() (*linkedca.Policy, error)

+ func (c *AdminClient) GetProvisionerPolicy(provisionerName string) (*linkedca.Policy, error)

+ func (c *AdminClient) RemoveACMEPolicy(provisionerName, reference, keyID string) error

+ func (c *AdminClient) RemoveAuthorityPolicy() error

+ func (c *AdminClient) RemoveProvisionerPolicy(provisionerName string) error

+ func (c *AdminClient) UpdateACMEPolicy(provisionerName, reference, keyID string, p *linkedca.Policy) (*linkedca.Policy, error)

+ func (c *AdminClient) UpdateAuthorityPolicy(p *linkedca.Policy) (*linkedca.Policy, error)

+ func (c *AdminClient) UpdateProvisionerPolicy(provisionerName string, p *linkedca.Policy) (*linkedca.Policy, error)

+ type ProvisionerOptions struct

+ Cursor string

+ ID string

+ Limit int

+ Name string

+ func (o *ProvisionerOptions) Apply(opts []ProvisionerOption) (err error)

Apr 19, 2022

Changes in this version

type Client

+ func (c *Client) GetCaURL() string

+ func (c *Client) RenewWithToken(token string) (*api.SignResponse, error)

type Option

+ func WithQuiet(quiet bool) Option

Feb 28, 2022

Changes in this version

+ type AdminClientError struct

+ Detail string

+ Message string

+ Type string

+ func (e *AdminClientError) Error() string

Feb 3, 2022

Changes in this version

type AdminClient

+ func (c *AdminClient) CreateExternalAccountKey(provisionerName string, eakRequest *adminAPI.CreateExternalAccountKeyRequest) (*linkedca.EABKey, error)

+ func (c *AdminClient) GetExternalAccountKeysPaginate(provisionerName, reference string, opts ...AdminOption) (*adminAPI.GetExternalAccountKeysResponse, error)

+ func (c *AdminClient) RemoveExternalAccountKey(provisionerName, keyID string) error

Nov 17, 2021

Changes in this version

type ClientOption

+ func WithInsecure() ClientOption

Sep 24, 2021

Changes in this version

type Option

+ func WithSSHHostPassword(password []byte) Option

+ func WithSSHUserPassword(password []byte) Option

Aug 26, 2021

Changes in this version

type Option

+ func WithLinkedCAToken(token string) Option

Jul 8, 2021

Changes in this version

+ type AdminClient struct

+ func NewAdminClient(endpoint string, opts ...ClientOption) (*AdminClient, error)

+ func (c *AdminClient) CreateAdmin(createAdminRequest *adminAPI.CreateAdminRequest) (*linkedca.Admin, error)

+ func (c *AdminClient) CreateProvisioner(prov *linkedca.Provisioner) (*linkedca.Provisioner, error)

+ func (c *AdminClient) GetAdmin(id string) (*linkedca.Admin, error)

+ func (c *AdminClient) GetAdmins(opts ...AdminOption) ([]*linkedca.Admin, error)

+ func (c *AdminClient) GetAdminsPaginate(opts ...AdminOption) (*adminAPI.GetAdminsResponse, error)

+ func (c *AdminClient) GetProvisioner(opts ...ProvisionerOption) (*linkedca.Provisioner, error)

+ func (c *AdminClient) GetProvisioners(opts ...AdminOption) (provisioner.List, error)

+ func (c *AdminClient) GetProvisionersPaginate(opts ...ProvisionerOption) (*adminAPI.GetProvisionersResponse, error)

+ func (c *AdminClient) RemoveAdmin(id string) error

+ func (c *AdminClient) RemoveProvisioner(opts ...ProvisionerOption) error

+ func (c *AdminClient) UpdateAdmin(id string, uar *adminAPI.UpdateAdminRequest) (*linkedca.Admin, error)

+ func (c *AdminClient) UpdateProvisioner(name string, prov *linkedca.Provisioner) error

+ type AdminOption func(o *adminOptions) error

+ func WithAdminCursor(cursor string) AdminOption

+ func WithAdminLimit(limit int) AdminOption

type ClientOption

+ func WithAdminX5C(certs []*x509.Certificate, key interface{}, passwordFile string) ClientOption

type ProvisionerOption

+ func WithProvisionerID(id string) ProvisionerOption

+ func WithProvisionerName(name string) ProvisionerOption

May 4, 2021

Changes in this version

type Client

+ func (c *Client) Rekey(req *api.RekeyRequest, tr http.RoundTripper) (*api.SignResponse, error)

Mar 25, 2021

Changes in this version

type Option

+ func WithIssuerPassword(password []byte) Option

Apr 9, 2020

Changes in this version

+ var DisableIdentity = false

+ var UserAgent = "step-http-client/1.0"

+ func CreateCertificateRequest(commonName string, sans ...string) (*api.CertificateRequest, crypto.PrivateKey, error)

+ func CreateIdentityRequest(commonName string, sans ...string) (*api.CertificateRequest, crypto.PrivateKey, error)

+ func LoadDefaultIdentity() (*identity.Identity, error)

+ func WriteDefaultIdentity(certChain []api.Certificate, key crypto.PrivateKey) error

type Client

+ func (c *Client) GetRootCAs() *x509.CertPool

+ func (c *Client) SSHBastion(req *api.SSHBastionRequest) (*api.SSHBastionResponse, error)

+ func (c *Client) SSHCheckHost(principal string, token string) (*api.SSHCheckPrincipalResponse, error)

+ func (c *Client) SSHConfig(req *api.SSHConfigRequest) (*api.SSHConfigResponse, error)

+ func (c *Client) SSHFederation() (*api.SSHRootsResponse, error)

+ func (c *Client) SSHGetHosts() (*api.SSHGetHostsResponse, error)

+ func (c *Client) SSHRekey(req *api.SSHRekeyRequest) (*api.SSHRekeyResponse, error)

+ func (c *Client) SSHRenew(req *api.SSHRenewRequest) (*api.SSHRenewResponse, error)

+ func (c *Client) SSHRevoke(req *api.SSHRevokeRequest) (*api.SSHRevokeResponse, error)

+ func (c *Client) SSHRoots() (*api.SSHRootsResponse, error)

+ func (c *Client) SSHSign(req *api.SSHSignRequest) (*api.SSHSignResponse, error)

+ func (c *Client) Version() (*api.VersionResponse, error)

type ClientOption

+ func WithCertificate(crt tls.Certificate) ClientOption

+ func WithRetryFunc(fn RetryFunc) ClientOption

type Provisioner

+ func (p *Provisioner) SSHToken(certType, keyID string, principals []string) (string, error)

+ type RetryFunc func(code int) bool

Sep 13, 2019

Changes in this version

+ type ACMEClient struct

+ Key *jose.JSONWebKey

+ func NewACMEClient(endpoint string, contact []string, opts ...ClientOption) (*ACMEClient, error)

+ func (c *ACMEClient) FinalizeOrder(url string, csr *x509.CertificateRequest) error

+ func (c *ACMEClient) GetAccountOrders() ([]string, error)

+ func (c *ACMEClient) GetAuthz(url string) (*acme.Authz, error)

+ func (c *ACMEClient) GetCertificate(url string) (*x509.Certificate, []*x509.Certificate, error)

+ func (c *ACMEClient) GetChallenge(url string) (*acme.Challenge, error)

+ func (c *ACMEClient) GetDirectory() (*acme.Directory, error)

+ func (c *ACMEClient) GetNonce() (string, error)

+ func (c *ACMEClient) GetOrder(url string) (*acme.Order, error)

+ func (c *ACMEClient) NewOrder(payload []byte) (*acme.Order, error)

+ func (c *ACMEClient) ValidateChallenge(url string) error

Sep 9, 2019

Changes in this version

type Client

+ func (c *Client) SignSSH(req *api.SignSSHRequest) (*api.SignSSHResponse, error)

Aug 29, 2019

Changes in this version

type Client

+ func (c *Client) RootFingerprint() (string, error)

type ClientOption

+ func WithCABundle(bundle []byte) ClientOption

type Option

+ func WithDatabase(db db.AuthDB) Option

type Provisioner

+ func (p *Provisioner) SetFingerprint(sum string)

Apr 30, 2019

Changes in this version

+ func StopHandler(servers ...Stopper)

type Client

+ func (c *Client) Revoke(req *api.RevokeRequest, tr http.RoundTripper) (*api.RevokeResponse, error)

+ func (c *Client) SetTransport(tr http.RoundTripper)

+ type Provisioner struct

+ func NewProvisioner(name, kid, caURL, caRoot string, password []byte) (*Provisioner, error)

+ func (p *Provisioner) Kid() string

+ func (p *Provisioner) Name() string

+ func (p *Provisioner) Token(subject string) (string, error)

+ type Stopper interface

+ Stop func() error

Feb 12, 2019

Changes in this version

+ func BootstrapListener(ctx context.Context, token string, inner net.Listener, options ...TLSOption) (net.Listener, error)

type TLSOptionCtx

+ Sign *api.SignResponse

Jan 15, 2019

Changes in this version

type Client

+ func (c *Client) Federation() (*api.FederationResponse, error)

+ func (c *Client) Roots() (*api.RootsResponse, error)

type TLSOption

+ func AddFederationToCAs() TLSOption

+ func AddFederationToClientCAs() TLSOption

+ func AddFederationToRootCAs() TLSOption

+ func AddRootsToCAs() TLSOption

+ func AddRootsToClientCAs() TLSOption

+ func AddRootsToRootCAs() TLSOption

+ type TLSOptionCtx struct

+ Client *Client

+ Config *tls.Config

+ OnRenewFunc []TLSOption

Nov 30, 2018

Changes in this version

+ func BootstrapClient(ctx context.Context, token string, options ...TLSOption) (*http.Client, error)

+ func BootstrapServer(ctx context.Context, token string, base *http.Server, options ...TLSOption) (*http.Server, error)

+ func Certificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func CreateSignRequest(ott string) (*api.SignRequest, crypto.PrivateKey, error)

+ func IntermediateCertificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func RootCertificate(sign *api.SignResponse) (*x509.Certificate, error)

+ func StopReloaderHandler(servers ...StopReloader)

+ func TLSCertificate(sign *api.SignResponse, pk crypto.PrivateKey) (*tls.Certificate, error)

+ func WithRenewBefore(b time.Duration) func(r *TLSRenewer) error

+ func WithRenewJitter(j time.Duration) func(r *TLSRenewer) error

+ type CA struct

+ func New(config *authority.Config, opts ...Option) (*CA, error)

+ func (ca *CA) Init(config *authority.Config) (*CA, error)

+ func (ca *CA) Reload() error

+ func (ca *CA) Run() error

+ func (ca *CA) Stop() error

+ type Client struct

+ func Bootstrap(token string) (*Client, error)

+ func NewClient(endpoint string, opts ...ClientOption) (*Client, error)

+ func (c *Client) GetClientTLSConfig(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*tls.Config, error)

+ func (c *Client) GetServerTLSConfig(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*tls.Config, error)

+ func (c *Client) Health() (*api.HealthResponse, error)

+ func (c *Client) ProvisionerKey(kid string) (*api.ProvisionerKeyResponse, error)

+ func (c *Client) Provisioners(opts ...ProvisionerOption) (*api.ProvisionersResponse, error)

+ func (c *Client) Renew(tr http.RoundTripper) (*api.SignResponse, error)

+ func (c *Client) Root(sha256Sum string) (*api.RootResponse, error)

+ func (c *Client) Sign(req *api.SignRequest) (*api.SignResponse, error)

+ func (c *Client) Transport(ctx context.Context, sign *api.SignResponse, pk crypto.PrivateKey, ...) (*http.Transport, error)

+ type ClientOption func(o *clientOptions) error

+ func WithRootFile(filename string) ClientOption

+ func WithRootSHA256(sum string) ClientOption

+ func WithTransport(tr http.RoundTripper) ClientOption

+ type Option func(o *options)

+ func WithConfigFile(name string) Option

+ func WithPassword(password []byte) Option

+ type ProvisionerOption func(o *provisionerOptions) error

+ func WithProvisionerCursor(cursor string) ProvisionerOption

+ func WithProvisionerLimit(limit int) ProvisionerOption

+ type RenewFunc func() (*tls.Certificate, error)

+ type StopReloader interface

+ Reload func() error

+ Stop func() error

+ type TLSOption func(c *tls.Config) error

+ func AddClientCA(cert *x509.Certificate) TLSOption

+ func AddRootCA(cert *x509.Certificate) TLSOption

+ func RequireAndVerifyClientCert() TLSOption

+ func VerifyClientCertIfGiven() TLSOption

+ type TLSRenewer struct

+ RenewCertificate RenewFunc

+ func NewTLSRenewer(cert *tls.Certificate, fn RenewFunc, opts ...tlsRenewerOptions) (*TLSRenewer, error)

+ func (r *TLSRenewer) GetCertificate(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) GetCertificateForCA(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) GetClientCertificate(*tls.CertificateRequestInfo) (*tls.Certificate, error)

+ func (r *TLSRenewer) Run()

+ func (r *TLSRenewer) RunContext(ctx context.Context)

+ func (r *TLSRenewer) Stop() bool