server

Documentation

Index

• type CertDXServer
  • func MakeCertDXServer() *CertDXServer
  • func (s *CertDXServer) HttpSrv() error
  • func (s *CertDXServer) Init() error
  • func (s *CertDXServer) SDSSrv() error
  • func (s *CertDXServer) Stop()
  • func (s *CertDXServer) Wait()
• type CertStore
  • func NewCertStore() CertStore
  • func (s *CertStore) Load() error
  • func (s *CertStore) PrintCertInfo()
• type CertT
  • func (c *CertT) IsValid() bool
• type MySDS
  • func (sds *MySDS) StreamSecrets(server secretv3.SecretDiscoveryService_StreamSecretsServer) error

Types

type CertDXServer

type CertDXServer struct {
	Config config.ServerConfig
	// contains filtered or unexported fields
}

func MakeCertDXServer

func MakeCertDXServer() *CertDXServer

func (*CertDXServer) HttpSrv

func (s *CertDXServer) HttpSrv() error

HttpSrv runs the HTTP API endpoint until Stop is called. Returns the first listener / setup error or nil on graceful shutdown.

func (*CertDXServer) Init

func (s *CertDXServer) Init() error

func (*CertDXServer) SDSSrv

func (s *CertDXServer) SDSSrv() error

SDSSrv runs the gRPC SDS endpoint until Stop is called. A goroutine watches the server's rootCtx and triggers grpcServer.Stop on shutdown, which closes every active stream — StreamSecrets goroutines then exit via their merged ctx without needing a kill channel.

func (*CertDXServer) Stop

func (s *CertDXServer) Stop()

Stop signals every server goroutine to wind down. It is safe to call concurrently and from any number of callers; only the first call cancels the root context.

func (*CertDXServer) Wait

func (s *CertDXServer) Wait()

Wait blocks until Stop is called (by signal handler, by a failing subserver, or by any other caller). main uses it as the single blocking point so a subserver crash doesn't leave the process alive with no listener.

type CertStore

type CertStore struct {
	// contains filtered or unexported fields
}

CertStore handles persistent storage of obtained certificates as the server's cache.json file.

func NewCertStore

func NewCertStore() CertStore

NewCertStore constructs a CertStore backed by the default cache.json path.

func (*CertStore) Load

func (s *CertStore) Load() error

Load reads and unmarshals the persisted certificate store. It returns os.ErrNotExist when the backing file hasn't been created yet. Expired certificates are discarded and domain keys are re-generated so that entries written by a previous key algorithm are migrated.

func (*CertStore) PrintCertInfo

func (s *CertStore) PrintCertInfo()

type CertT

type CertT struct {
	FullChain   []byte    `json:"fullChain"`
	Key         []byte    `json:"key"`
	ValidBefore time.Time `json:"validBefore"`
	RenewAt     time.Time `json:"renewAt"`
}

func (*CertT) IsValid

func (c *CertT) IsValid() bool

type MySDS

type MySDS struct {
	secretv3.UnimplementedSecretDiscoveryServiceServer
	// contains filtered or unexported fields
}

func (*MySDS) StreamSecrets

func (sds *MySDS) StreamSecrets(server secretv3.SecretDiscoveryService_StreamSecretsServer) error