tls

package

v1.0.0 Latest Latest Go to latest Published: Dec 5, 2019 License: Apache-2.0 Imports: 10 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func GenerateInClusterServiceName(props TlsCertificateProps) string

GenerateInClusterServiceName The generated service name should be the common name for TLS certificate

func IsTlsPairShouldBeUpdated(tlsPair *TlsPemPair) bool

IsTlsPairShouldBeUpdated checks if TLS pair has expited and needs to be updated

func TlsCertificateGenerateRequest(privateKey *rsa.PrivateKey, props TlsCertificateProps) (*certificates.CertificateSigningRequest, error)

TlsCertificateGenerateRequest Generates raw certificate signing request

func TlsCertificateGetExpirationDate(certData []byte) (*time.Time, error)

TlsCertificateGetExpirationDate Gets NotAfter property from raw certificate

func TlsCertificateRequestToPem(csrRaw []byte) []byte

TlsCertificateRequestToPem Creates PEM block from raw certificate request

func TlsGeneratePrivateKey() (*rsa.PrivateKey, error)

TlsGeneratePrivateKey Generates RSA private key

func TlsPrivateKeyToPem(rsaKey *rsa.PrivateKey) []byte

TlsPrivateKeyToPem Creates PEM block from private key object

type TlsCertificateProps struct {
	Service       string
	Namespace     string
	ApiServerHost string
}

TlsCertificateProps Properties of TLS certificate which should be issued for webhook server

type TlsPemPair struct {
	Certificate []byte
	PrivateKey  []byte
}

TlsPemPair The pair of TLS certificate corresponding private key, both in PEM format