spiffe

package

v0.0.0-...-51eebe4 Latest Latest Go to latest Published: Mar 12, 2023 License: Apache-2.0 Imports: 8 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/PhilippHeuer/in-toto-golang

Documentation ¶

Index ¶

type SVIDDetails
- func GetSVID(ctx context.Context, client SVIDFetcher) (SVIDDetails, error)
- func (s SVIDDetails) InTotoKey() (intoto.Key, error)
type SVIDFetcher
- func NewClient(ctx context.Context, socketPath string) (SVIDFetcher, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type SVIDDetails ¶

type SVIDDetails struct {
	PrivateKey    crypto.Signer
	Certificate   *x509.Certificate
	Intermediates []*x509.Certificate
}

SVIDDetails captures the Private Key, Root and Intermediate Certificate from the SVID provided by spire for the workload.

func GetSVID ¶

func GetSVID(ctx context.Context, client SVIDFetcher) (SVIDDetails, error)

GetSVID attempts to request an SVID from the provided SPIRE Workload API socket. If attestation succeeds and an SVID is acquired the resulting X509 key & certificate pair will be returned as well as any intermediate certificates needed to establish trust to trust domain's root.

func (SVIDDetails) InTotoKey ¶

func (s SVIDDetails) InTotoKey() (intoto.Key, error)

InTotoKey uses the private key and certificate obtained from Spire to initialize intoto.key to be used for signing.

type SVIDFetcher ¶

type SVIDFetcher interface {
	FetchX509Context(ctx context.Context) (*workloadapi.X509Context, error)
	Close() error
}

SVIDFetcher uses the context to connect to the spire and get the SVID associated with the workload.

func NewClient ¶

func NewClient(ctx context.Context, socketPath string) (SVIDFetcher, error)

NewClient takes the context and the provided spire agent socket path in order to initialize the workload API.

Source Files ¶

View all Source files

spiffe.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL