derivecert

package
v0.25.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Apr 5, 2024 License: Apache-2.0 Imports: 15 Imported by: 0

Documentation

Overview

Package derivecert is used to deterministically generate TLS certificate authority and certificates out of pre-shared key

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type CA 

type CA struct {
	// contains filtered or unexported fields
}

CA is certificate authority

func CAFromPEM 

func CAFromPEM(p PEM) (*CA, string, error)

CAFromPEM loads CA from PEM encoded data

func NewCA 

func NewCA(psk []byte) (*CA, error)

NewCA creates new certificate authority using a pre-shared key. This certificate authority is generated on the fly and would yield the same private key every time for the given PSK.

That allows services that have a certain pre-shared key (i.e. shared_secret) to have automatic TLS without need to share and distribute certs, and provides a better alternative to plaintext communication, but is not a replacement for proper mTLS.

func (*CA) Key 

func (ca *CA) Key() *ecdsa.PrivateKey

Key returns CA private key

func (*CA) NewServerCert 

func (ca *CA) NewServerCert(domains []string, configure ...func(*x509.Certificate)) (*PEM, error)

NewServerCert generates certificate for the given domain name(s)

func (*CA) PEM 

func (ca *CA) PEM() (*PEM, error)

PEM returns PEM-encoded cert and key

type PEM 

type PEM struct {
	Cert []byte
	Key  []byte
}

PEM representation of certificate authority data, serializable to JSON

func ToPEM 

func ToPEM(key *ecdsa.PrivateKey, certDer []byte) (*PEM, error)

ToPEM converts private key and certificate into PEM representation

func (*PEM) KeyCert 

func (p *PEM) KeyCert() (*ecdsa.PrivateKey, *x509.Certificate, error)

KeyCert parses private key and cert from PEM encoded format

func (*PEM) TLS 

func (p *PEM) TLS() (tls.Certificate, error)

TLS parses PEM and returns TLS certificate

Source Files

View all Source files

Directories

Path Synopsis
Package config implements derived certs in the Pomerium Configuration
 Package config implements derived certs in the Pomerium Configuration

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.