cert

func NewCA ¶

func NewCA(cn string, expiry time.Time) ([]byte, []byte, error)

NewCA generates a CA certificate/key pair.

func NewCSR ¶

func NewCSR(user string, role string) ([]byte, []byte, error)

NewCSR generates a CSR for CN=user,O=role It returns the CSR and private key in PEM format.

func NewCert ¶

func NewCert(caCertPEM, caKeyPEM []byte, expiry time.Time, cn string, extKeyUsage []x509.ExtKeyUsage) ([]byte, []byte, error)

NewCert generates a certificate/key pair.

func SignCSR ¶

func SignCSR(csr *x509.CertificateRequest, parent *x509.Certificate, privKey *rsa.PrivateKey) ([]byte, error)