testca

package

v1.9.4 Latest Latest Go to latest Published: Apr 5, 2024 License: Apache-2.0 Imports: 25 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/spiffe/spire

Links

Open Source Insights

Documentation ¶

Index ¶

func CreateCACertificate(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, ...) (*x509.Certificate, crypto.Signer)
func CreateCertificate(tb testing.TB, tmpl, parent *x509.Certificate, pub, priv any) *x509.Certificate
func CreateWebCredentials(t testing.TB) (*x509.CertPool, *tls.Certificate)
func CreateX509Certificate(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, ...) (*x509.Certificate, crypto.Signer)
func CreateX509SVID(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, ...) (*x509.Certificate, crypto.Signer)
type CA
- func New(tb testing.TB, td spiffeid.TrustDomain) *CA
type CertificateOption

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CreateCACertificate ¶

func CreateCACertificate(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, options ...CertificateOption) (*x509.Certificate, crypto.Signer)

func CreateCertificate ¶

func CreateCertificate(tb testing.TB, tmpl, parent *x509.Certificate, pub, priv any) *x509.Certificate

func CreateWebCredentials ¶

func CreateWebCredentials(t testing.TB) (*x509.CertPool, *tls.Certificate)

func CreateX509Certificate ¶

func CreateX509Certificate(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, options ...CertificateOption) (*x509.Certificate, crypto.Signer)

func CreateX509SVID ¶

func CreateX509SVID(tb testing.TB, parent *x509.Certificate, parentKey crypto.Signer, id spiffeid.ID, options ...CertificateOption) (*x509.Certificate, crypto.Signer)

Types ¶

type CA ¶

type CA struct {
	// contains filtered or unexported fields
}

func New ¶

func New(tb testing.TB, td spiffeid.TrustDomain) *CA

func (*CA) Bundle ¶

func (ca *CA) Bundle() *spiffebundle.Bundle

func (*CA) ChildCA ¶

func (ca *CA) ChildCA(options ...CertificateOption) *CA

func (*CA) CreateJWTSVID ¶

func (ca *CA) CreateJWTSVID(id spiffeid.ID, audience []string) *jwtsvid.SVID

func (*CA) CreateX509Certificate ¶

func (ca *CA) CreateX509Certificate(options ...CertificateOption) ([]*x509.Certificate, crypto.Signer)

func (*CA) CreateX509SVID ¶

func (ca *CA) CreateX509SVID(id spiffeid.ID, options ...CertificateOption) *x509svid.SVID

func (*CA) JWTAuthorities ¶

func (ca *CA) JWTAuthorities() map[string]crypto.PublicKey

func (*CA) JWTBundle ¶

func (ca *CA) JWTBundle() *jwtbundle.Bundle

func (*CA) X509Authorities ¶

func (ca *CA) X509Authorities() []*x509.Certificate

func (*CA) X509Bundle ¶

func (ca *CA) X509Bundle() *x509bundle.Bundle

type CertificateOption ¶

type CertificateOption interface {
	// contains filtered or unexported methods
}

func WithID ¶ added in v1.2.0

func WithID(id spiffeid.ID) CertificateOption

func WithIPAddresses ¶

func WithIPAddresses(ips ...net.IP) CertificateOption

func WithKeyUsage ¶

func WithKeyUsage(keyUsage x509.KeyUsage) CertificateOption

func WithLifetime ¶

func WithLifetime(notBefore, notAfter time.Time) CertificateOption

func WithSerial ¶

func WithSerial(serial *big.Int) CertificateOption

func WithSubject ¶

func WithSubject(subject pkix.Name) CertificateOption

Source Files ¶

View all Source files

ca.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL