encryption

package

v0.0.0-...-79855c9 Latest Latest Go to latest Published: May 1, 2024 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func CreateCertificate(key *rsa.PrivateKey, hostnames []string, expire time.Duration) (tls.Certificate, error)

createCertificate is responsible for creating a certificate

func DecodeText(state, key string) (string, error)

decodeText decodes the session state cookie value

func DecryptDataBlock(cipherText, key []byte) ([]byte, error)

decryptDataBlock decrypts some cipher text

func EncodeText(plaintext string, key string) (string, error)

encodeText encodes the session state information into a value for a cookie to consume

func EncryptDataBlock(plaintext, key []byte) ([]byte, error)

encryptDataBlock encrypts the plaintext string with the key

func LoadCA(cert, key string) (*tls.Certificate, error)

loadCA loads the certificate authority

type CertificationRotation struct {
	sync.RWMutex
	// contains filtered or unexported fields
}

func NewCertificateRotator(cert, key string, log *zap.Logger, metric *prometheus.Counter) (*CertificationRotation, error)

newCertificateRotator creates a new certificate

func (c *CertificationRotation) GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate is responsible for retrieving

func (c *CertificationRotation) Watch() error

watch is responsible for adding a file notification and watch on the files for changes

type SelfSignedCertificate struct {
	sync.RWMutex
	// contains filtered or unexported fields
}

func NewSelfSignedCertificate(hostnames []string, expiry time.Duration, log *zap.Logger) (*SelfSignedCertificate, error)

newSelfSignedCertificate creates and returns a self signed certificate manager

func (c *SelfSignedCertificate) GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)

GetCertificate is responsible for retrieving