acme

Documentation

Index

• Constants
• func BuildRoute53DnsProvider(credProvider ...aws.CredentialsProvider) (challenge.Provider, error)
• func GeneratePrivateKey() (crypto.PrivateKey, error)
• func NewAwsDynamicCredentialsProvider(backend AwsDynamicCredentialsBackend) (aws.CredentialsProvider, error)
• type AccountStorage
• type AcmeDealer
• type AwsDynamicCredentialsBackend
• type DynamicCredentialsProvider
  • func (m *DynamicCredentialsProvider) IsExpired() bool
  • func (m *DynamicCredentialsProvider) Retrieve(ctx context.Context) (aws.Credentials, error)
• type GoLego
  • func NewGoLegoDealer(accountStorage AccountStorage, conf config.AcmeVaultConfig, ...) (*GoLego, error)
  • func (l *GoLego) ObtainCert(domain config.DomainsConfig) (*certstorage.AcmeCertificate, error)
  • func (l *GoLego) RegisterAccount() (*registration.Resource, error)
  • func (l *GoLego) RenewCert(cert *certstorage.AcmeCertificate) (*certstorage.AcmeCertificate, error)

Constants

const AwsIamPropagationImpediment = 20 * time.Second

const DnsProviderRoute53 = "route53"

Functions

func BuildRoute53DnsProvider

func BuildRoute53DnsProvider(credProvider ...aws.CredentialsProvider) (challenge.Provider, error)

func GeneratePrivateKey

func GeneratePrivateKey() (crypto.PrivateKey, error)

func NewAwsDynamicCredentialsProvider

func NewAwsDynamicCredentialsProvider(backend AwsDynamicCredentialsBackend) (aws.CredentialsProvider, error)

Types

type AccountStorage

type AccountStorage interface {
	// Authenticate authenticates against the storage subsystem and returns an error about the success of the operation.
	Authenticate() error

	// WriteAccount writes an ACME account to the storage.
	WriteAccount(account certstorage.AcmeAccount) error

	// ReadAccount reads the ACME account data for a given email address from the storage.
	ReadAccount(email string) (*certstorage.AcmeAccount, error)

	// Logout cleans up and logs out of the storage subsystem.
	Logout() error
}

type AcmeDealer

type AcmeDealer interface {
	RegisterAccount() (*registration.Resource, error)
	ObtainCert(domain config.DomainsConfig) (*certstorage.AcmeCertificate, error)
	RenewCert(cert *certstorage.AcmeCertificate) (*certstorage.AcmeCertificate, error)
}

type AwsDynamicCredentialsBackend

type AwsDynamicCredentialsBackend interface {
	ReadAwsCredentials() (aws.Credentials, error)
}

type DynamicCredentialsProvider

type DynamicCredentialsProvider struct {
	// contains filtered or unexported fields
}

func (*DynamicCredentialsProvider) IsExpired

func (m *DynamicCredentialsProvider) IsExpired() bool

func (*DynamicCredentialsProvider) Retrieve

func (m *DynamicCredentialsProvider) Retrieve(ctx context.Context) (aws.Credentials, error)

type GoLego

type GoLego struct {
	// contains filtered or unexported fields
}

func NewGoLegoDealer

func NewGoLegoDealer(accountStorage AccountStorage, conf config.AcmeVaultConfig, dnsProvider challenge.Provider) (*GoLego, error)

func (*GoLego) ObtainCert

func (l *GoLego) ObtainCert(domain config.DomainsConfig) (*certstorage.AcmeCertificate, error)

func (*GoLego) RegisterAccount

func (l *GoLego) RegisterAccount() (*registration.Resource, error)

func (*GoLego) RenewCert

func (l *GoLego) RenewCert(cert *certstorage.AcmeCertificate) (*certstorage.AcmeCertificate, error)