client

Documentation

Index

• Variables
• type GroundTruth
• type Response
• type SecureClient
  • func NewSecureClient(enclave, repo string) *SecureClient
  • func (s *SecureClient) Get(url string, headers map[string]string) (*Response, error)
  • func (s *SecureClient) GroundTruth() *GroundTruth
  • func (s *SecureClient) HTTPClient() (*http.Client, error)
  • func (s *SecureClient) Post(url string, headers map[string]string, body []byte) (*Response, error)
  • func (s *SecureClient) Verify() (*GroundTruth, error)
• type TLSBoundRoundTripper
  • func (t *TLSBoundRoundTripper) RoundTrip(r *http.Request) (*http.Response, error)

Variables

var (
	ErrNoTLS              = errors.New("no TLS connection")
	ErrCertMismatch       = errors.New("certificate fingerprint mismatch")
	ErrNoValidCertificate = errors.New("no valid certificate")
)

Types

type GroundTruth

type GroundTruth struct {
	PublicKey   string
	Digest      string
	Measurement string
}

GroundTruth represents the "known good" verified of the enclave

type Response

type Response struct {
	Status     string
	StatusCode int
	Body       []byte
}

type SecureClient

type SecureClient struct {
	// contains filtered or unexported fields
}

func NewSecureClient

func NewSecureClient(enclave, repo string) *SecureClient

func (*SecureClient) Get

func (s *SecureClient) Get(url string, headers map[string]string) (*Response, error)

Get makes an HTTP GET request

func (*SecureClient) GroundTruth

func (s *SecureClient) GroundTruth() *GroundTruth

GroundTruth returns the last verified enclave state

func (*SecureClient) HTTPClient

func (s *SecureClient) HTTPClient() (*http.Client, error)

HTTPClient returns an HTTP client that only accepts TLS connections to the verified enclave

func (*SecureClient) Post

func (s *SecureClient) Post(url string, headers map[string]string, body []byte) (*Response, error)

Post makes an HTTP POST request

func (*SecureClient) Verify

func (s *SecureClient) Verify() (*GroundTruth, error)

Verify fetches the latest verification information from GitHub and Sigstore and stores the ground truth results in the client

type TLSBoundRoundTripper

type TLSBoundRoundTripper struct {
	ExpectedPublicKey string
}

func (*TLSBoundRoundTripper) RoundTrip

func (t *TLSBoundRoundTripper) RoundTrip(r *http.Request) (*http.Response, error)