signer

package

v0.0.0-...-f9ba299 Latest Latest Go to latest Published: Jul 11, 2014 License: BSD-2-Clause Imports: 20 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/cmars/cfssl

Links

Open Source Insights

Documentation ¶

Overview ¶

Package signer implements certificate signature functionality for CF-SSL.

Index ¶

func DefaultSigAlgo(priv interface{}) x509.SignatureAlgorithm
type Signer
- func NewSigner(caFile, cakeyFile string, policy *config.Signing) (*Signer, error)
- func (s *Signer) Sign(hostName string, in []byte, profileName string) (cert []byte, err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func DefaultSigAlgo ¶

func DefaultSigAlgo(priv interface{}) x509.SignatureAlgorithm

DefaultSigAlgo returns an appropriate X.509 signature algorithm given the CA's private key.

Types ¶

type Signer ¶

type Signer struct {
	CA      *x509.Certificate
	Priv    interface{}
	Policy  *config.Signing
	SigAlgo x509.SignatureAlgorithm
}

A Signer contains a CA's certificate and private key for signing certificates, a Signing policy to refer to and a SignatureAlgorithm

func NewSigner ¶

func NewSigner(caFile, cakeyFile string, policy *config.Signing) (*Signer, error)

NewSigner generates a new certificate signer using the certificate authority certificate and private key and Signing config for signing. caFile should contain the CA's certificate, and the cakeyFile should contain the private key. Both must be PEM-encoded.

func (*Signer) Sign ¶

func (s *Signer) Sign(hostName string, in []byte, profileName string) (cert []byte, err error)

Sign signs a new certificate based on the PEM-encoded client certificate or certificate request with the signing profile, specified by profileName. The certificate will be valid for the host named in the hostName parameter.

Source Files ¶

View all Source files

signer.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL