kms

Documentation

Index

• Variables
• type Attester
• type CertificateManager
• type FS
  • func CertFS(ctx context.Context, kmsuri string) (FS, error)
  • func KeyFS(ctx context.Context, kmsuri string) (FS, error)
• type KeyManager
  • func New(ctx context.Context, opts apiv1.Options) (KeyManager, error)
• type Options
• type Type

Variables

var Default = &softkms.SoftKMS{}

Default is the implementation of the default KMS.

Types

type Attester

type Attester = apiv1.Attester

Attester is the interface implemented by the KMS that can respond with an attestation certificate or key.

Experimental

Notice: This API is EXPERIMENTAL and may be changed or removed in a later release.

type CertificateManager

type CertificateManager = apiv1.CertificateManager

CertificateManager is the interface implemented by the KMS that can load and store x509.Certificates.

type FS

type FS interface {
	fs.FS
	Close() error
}

FS adds a close method to the fs.FS interface. This new method allows to properly close the underlying KMS.

func CertFS

func CertFS(ctx context.Context, kmsuri string) (FS, error)

CertFS creates a new io/fs with the given KMS URI.

func KeyFS

func KeyFS(ctx context.Context, kmsuri string) (FS, error)

KeyFS creates a new KeyFS with the given KMS URI.

type KeyManager

type KeyManager = apiv1.KeyManager

KeyManager is the interface implemented by all the KMS.

func New

func New(ctx context.Context, opts apiv1.Options) (KeyManager, error)

New initializes a new KMS from the given type.

type Options

type Options = apiv1.Options

Options are the KMS options. They represent the kms object in the ca.json.

type Type

type Type = apiv1.Type

Type represents the KMS type used.