cert

package

v1.0.0 Latest Latest Go to latest Published: Nov 29, 2023 License: Apache-2.0 Imports: 15 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/fabedge/fabedge

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func DecodePEM(data []byte) ([]byte, error)
func EncodeCertPEM(certDER []byte) []byte
func EncodeCertRequestPEM(crs []byte) []byte
func EncodePrivateKeyPEM(privateKeyDER []byte) []byte
func NewCertFromCA(caCert *x509.Certificate, caKey *rsa.PrivateKey, cfg Config) ([]byte, []byte, error)
func NewCertFromCA2(ca, caKey []byte, cfg Config) ([]byte, []byte, error)
func NewCertRequest(req Request) ([]byte, []byte, error)
func NewSelfSignedCA(cfg Config) ([]byte, []byte, error)
func ReadPEMFileAndDecode(filename string) ([]byte, error)
func SaveCertKeyToFile(certDER []byte, keyDER []byte, certPath, keyPath string) error
func SaveCertToFile(certDER []byte, certPath string) error
func SaveFile(content []byte, filename string) error
func SavePrivateKeyToFile(keyDER []byte, keyPath string) error
func VerifyCert(caDER, certDER []byte, usages []x509.ExtKeyUsage) error
type Config
type Manager
- func NewManger(caDER, caKeyDER []byte, validPeriod time.Duration) (Manager, error)
- func NewRemoteManager(caCertDER []byte, signCert SignCertFunc) (Manager, error)
type Request
type SignCertFunc

Constants ¶

View Source

const (
	DefaultCountry      = "CN"
	DefaultOrganization = "fabedge.io"
	DefaultCAName       = "Fabedge CA"
)

Variables ¶

View Source

var (
	ExtKeyUsagesServerAndClient = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}
	ExtKeyUsagesServerOnly      = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
	ExtKeyUsagesClientOnly      = []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}
)

Functions ¶

func DecodePEM ¶

func DecodePEM(data []byte) ([]byte, error)

func EncodeCertPEM ¶

func EncodeCertPEM(certDER []byte) []byte

func EncodeCertRequestPEM ¶

func EncodeCertRequestPEM(crs []byte) []byte

func EncodePrivateKeyPEM ¶

func EncodePrivateKeyPEM(privateKeyDER []byte) []byte

func NewCertFromCA ¶

func NewCertFromCA(caCert *x509.Certificate, caKey *rsa.PrivateKey, cfg Config) ([]byte, []byte, error)

NewCertFromCA creates certificate and key from specified CA cert/key pair

func NewCertFromCA2 ¶

func NewCertFromCA2(ca, caKey []byte, cfg Config) ([]byte, []byte, error)

NewCertFromCA2 creates certificate and key from specified CA cert/key pair

func NewCertRequest ¶

func NewCertRequest(req Request) ([]byte, []byte, error)

func NewSelfSignedCA ¶

func NewSelfSignedCA(cfg Config) ([]byte, []byte, error)

NewSelfSignedCA create a CA cert/key pair

func ReadPEMFileAndDecode ¶

func ReadPEMFileAndDecode(filename string) ([]byte, error)

func SaveCertKeyToFile ¶

func SaveCertKeyToFile(certDER []byte, keyDER []byte, certPath, keyPath string) error

func SaveCertToFile ¶

func SaveCertToFile(certDER []byte, certPath string) error

func SaveFile ¶

func SaveFile(content []byte, filename string) error

func SavePrivateKeyToFile ¶

func SavePrivateKeyToFile(keyDER []byte, keyPath string) error

func VerifyCert ¶

func VerifyCert(caDER, certDER []byte, usages []x509.ExtKeyUsage) error

VerifyCert verifies the certificate by CA certificate

Types ¶

type Config ¶

type Config struct {
	CommonName   string
	Organization []string
	Usages       []x509.ExtKeyUsage

	DNSNames []string
	IPs      []net.IP

	ValidityPeriod time.Duration
	IsCA           bool
}

type Manager ¶

type Manager interface {
	// NewCertKey Create a cert/key pair from CA with specified config
	NewCertKey(cfg Config) (certDER []byte, keyDER []byte, err error)
	SignCert(csr []byte) ([]byte, error)
	VerifyCert(cert *x509.Certificate, usages []x509.ExtKeyUsage) error
	VerifyCertInPEM(certPEM []byte, usages []x509.ExtKeyUsage) error
	GetCACert() *x509.Certificate
	GetCACertPEM() []byte
}

func NewManger ¶

func NewManger(caDER, caKeyDER []byte, validPeriod time.Duration) (Manager, error)

func NewRemoteManager ¶

func NewRemoteManager(caCertDER []byte, signCert SignCertFunc) (Manager, error)

type Request ¶

type Request struct {
	CommonName   string
	Organization []string
	DNSNames     []string
	IPs          []net.IP
}

type SignCertFunc ¶

type SignCertFunc func(csr []byte) ([]byte, error)

SignCertFunc receive csr and return a cert bytes

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL