certs

package

v1.15.16 Latest Latest Go to latest Published: Jun 9, 2022 License: GPL-3.0 Imports: 27 Imported by: 12

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/bishopfox/sliver

README ¶

certs

X.509 certificate generation and management code.

Documentation ¶

Index ¶

Constants
Variables
func GenerateCertificateAuthority(caType string, commonName string) (*x509.Certificate, *ecdsa.PrivateKey)
func GenerateECCCertificate(caType string, commonName string, isCA bool, isClient bool) ([]byte, []byte)
func GenerateRSACertificate(caType string, commonName string, isCA bool, isClient bool) ([]byte, []byte)
func GenerateWGKeys(isPeer bool, wgPeerTunIP string) (string, string, error)
func GetACMEDir() string
func GetACMEManager(domain string) *autocert.Manager
func GetCertificate(caType string, keyType string, commonName string) ([]byte, []byte, error)
func GetCertificateAuthority(caType string) (*x509.Certificate, *ecdsa.PrivateKey, error)
func GetCertificateAuthorityPEM(caType string) ([]byte, []byte, error)
func GetECCCertificate(caType string, commonName string) ([]byte, []byte, error)
func GetRSACertificate(caType string, commonName string) ([]byte, []byte, error)
func GetWGPeers() (map[string]string, error)
func GetWGServerKeys() (string, string, error)
func HTTPSGenerateRSACertificate(host string) ([]byte, []byte, error)
func ImplantGenerateWGKeys(wgPeerTunIP string) (string, string, error)
func MtlsC2ImplantGenerateECCCertificate(name string) ([]byte, []byte, error)
func MtlsC2ServerGenerateECCCertificate(host string) ([]byte, []byte, error)
func OperatorClientGenerateCertificate(operator string) ([]byte, []byte, error)
func OperatorClientGetCertificate(operator string) ([]byte, []byte, error)
func OperatorClientListCertificates() []*x509.Certificate
func OperatorClientRemoveCertificate(operator string) error
func OperatorServerGenerateCertificate(hostname string) ([]byte, []byte, error)
func OperatorServerGetCertificate(hostname string) ([]byte, []byte, error)
func RemoveCertificate(caType string, keyType string, commonName string) error
func SaveCertificateAuthority(caType string, cert []byte, key []byte)
func SetupCAs()
func SetupWGKeys()

Constants ¶

View Source

const (
	// RSAKeySize - Default size of RSA keys in bits
	RSAKeySize = 2048 // This is plenty 4096 is overkill

	// ECCKey - Namespace for ECC keys
	ECCKey = "ecc"

	// RSAKey - Namespace for RSA keys
	RSAKey = "rsa"
)

View Source

const (
	// MtlsImplantCA - Directory containing HTTPS server certificates
	MtlsImplantCA = "mtls-implant"
	MtlsServerCA  = "mtls-server"
)

View Source

const (
	// ACMEDirName - Name of dir to store ACME certs
	ACMEDirName = "acme"
)

View Source

const (
	// HTTPSCA - Directory containing operator certificates
	HTTPSCA = "https"
)

View Source

const (
	// OperatorCA - Directory containing operator certificates
	OperatorCA = "operator"
)

Variables ¶

View Source

var (
	ErrWGPeerDoesNotExist     = errors.New("wg peer does not exist")
	ErrWGServerKeysDoNotExist = errors.New("wg server keys do not exist")
)

View Source

var (

	// ErrCertDoesNotExist - Returned if a GetCertificate() is called for a cert/cn that does not exist
	ErrCertDoesNotExist = errors.New("Certificate does not exist")
)

Functions ¶

func GenerateCertificateAuthority ¶

func GenerateCertificateAuthority(caType string, commonName string) (*x509.Certificate, *ecdsa.PrivateKey)

GenerateCertificateAuthority - Creates a new CA cert for a given type

func GenerateECCCertificate ¶

func GenerateECCCertificate(caType string, commonName string, isCA bool, isClient bool) ([]byte, []byte)

GenerateECCCertificate - Generate a TLS certificate with the given parameters We choose some reasonable defaults like Curve, Key Size, ValidFor, etc. Returns two strings `cert` and `key` (PEM Encoded).

func GenerateRSACertificate ¶

func GenerateRSACertificate(caType string, commonName string, isCA bool, isClient bool) ([]byte, []byte)

GenerateRSACertificate - Generates a 2048 bit RSA Certificate

func GenerateWGKeys ¶ added in v1.4.9

func GenerateWGKeys(isPeer bool, wgPeerTunIP string) (string, string, error)

GenerateWGKeys - Generates and saves new wg keys

func GetACMEDir ¶

func GetACMEDir() string

GetACMEDir - Dir to store ACME certs

func GetACMEManager ¶

func GetACMEManager(domain string) *autocert.Manager

GetACMEManager - Get an ACME cert/tls config with the certs

func GetCertificate ¶

func GetCertificate(caType string, keyType string, commonName string) ([]byte, []byte, error)

GetCertificate - Get the PEM encoded certificate & key for a host

func GetCertificateAuthority ¶

func GetCertificateAuthority(caType string) (*x509.Certificate, *ecdsa.PrivateKey, error)

GetCertificateAuthority - Get the current CA certificate

func GetCertificateAuthorityPEM ¶

func GetCertificateAuthorityPEM(caType string) ([]byte, []byte, error)

GetCertificateAuthorityPEM - Get PEM encoded CA cert/key

func GetECCCertificate ¶

func GetECCCertificate(caType string, commonName string) ([]byte, []byte, error)

GetECCCertificate - Get an ECC certificate

func GetRSACertificate ¶

func GetRSACertificate(caType string, commonName string) ([]byte, []byte, error)

GetRSACertificate - Get an RSA certificate

func GetWGPeers ¶ added in v1.4.9

func GetWGPeers() (map[string]string, error)

GetWGSPeers - Get a map of Pubkey:TunIP for existing wg peers

func GetWGServerKeys ¶ added in v1.4.9

func GetWGServerKeys() (string, string, error)

GetWGServerKeys - Get existing wg server keys

func HTTPSGenerateRSACertificate ¶

func HTTPSGenerateRSACertificate(host string) ([]byte, []byte, error)

HTTPSGenerateRSACertificate - Generate a server certificate signed with a given CA

func ImplantGenerateWGKeys ¶ added in v1.4.9

func ImplantGenerateWGKeys(wgPeerTunIP string) (string, string, error)

ImplantGenerateWGKeys - Generate WG keys for implant

func MtlsC2ImplantGenerateECCCertificate ¶ added in v1.5.0

func MtlsC2ImplantGenerateECCCertificate(name string) ([]byte, []byte, error)

MtlsC2ImplantGenerateECCCertificate - Generate a server certificate signed with a given CA

func MtlsC2ServerGenerateECCCertificate ¶ added in v1.5.0

func MtlsC2ServerGenerateECCCertificate(host string) ([]byte, []byte, error)

MtlsC2ServerGenerateECCCertificate - Generate a server certificate signed with a given CA

func OperatorClientGenerateCertificate ¶

func OperatorClientGenerateCertificate(operator string) ([]byte, []byte, error)

OperatorClientGenerateCertificate - Generate a certificate signed with a given CA

func OperatorClientGetCertificate ¶

func OperatorClientGetCertificate(operator string) ([]byte, []byte, error)

OperatorClientGetCertificate - Helper function to fetch a client cert

func OperatorClientListCertificates ¶

func OperatorClientListCertificates() []*x509.Certificate

OperatorClientListCertificates - Get all client certificates

func OperatorClientRemoveCertificate ¶

func OperatorClientRemoveCertificate(operator string) error

OperatorClientRemoveCertificate - Helper function to remove a client cert

func OperatorServerGenerateCertificate ¶

func OperatorServerGenerateCertificate(hostname string) ([]byte, []byte, error)

OperatorServerGenerateCertificate - Generate a certificate signed with a given CA

func OperatorServerGetCertificate ¶

func OperatorServerGetCertificate(hostname string) ([]byte, []byte, error)

OperatorServerGetCertificate - Helper function to fetch a server cert

func RemoveCertificate ¶

func RemoveCertificate(caType string, keyType string, commonName string) error

RemoveCertificate - Remove a certificate from the cert store

func SaveCertificateAuthority ¶

func SaveCertificateAuthority(caType string, cert []byte, key []byte)

SaveCertificateAuthority - Save the certificate and the key to the filesystem doesn't return an error because errors are fatal. If we can't generate CAs, then we can't secure communication and we should die a horrible death.

func SetupCAs ¶

func SetupCAs()

SetupCAs - Creates directories for certs

func SetupWGKeys ¶ added in v1.4.9

func SetupWGKeys()

SetupWGKeys - Setup server keys

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL