security

package

v0.2.0 Latest Latest Go to latest Published: Nov 18, 2019 License: Apache-2.0 Imports: 9 Imported by: 2

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

View Source

const (
	// DefaultAgentAddress points to unix socket used by default
	DefaultAgentAddress = "/run/spire/sockets/agent.sock"
)

This section is empty.

This section is empty.

type CertificateObtainer interface {
	Stop()
	ErrorCh() <-chan error
	CertificateCh() <-chan *Response
}

CertificateObtainer abstracts certificates obtaining

func NewSpireObtainer() CertificateObtainer

NewSpireObtainer creates CertificateObtainer that fetch certificates from spire-agent

func NewSpireObtainerWithAddress(addr net.Addr) CertificateObtainer

NewSpireObtainerWithAddress create CertificateObtainer to passed addr

type Manager interface {
	GetCertificate() *tls.Certificate
	GetCABundle() *x509.CertPool
}

Manager provides methods for secure grpc communication

func NewManager() Manager

NewManager creates new security.Manager using SpireCertObtainer

func NewManagerWithCertObtainer(obtainer CertificateObtainer) Manager

NewManagerWithCertObtainer creates new security.Manager with passed CertificateObtainer

type Response struct {
	TLSCert  *tls.Certificate
	CABundle *x509.CertPool
}

Response represents pair - TLSCert and CABundle that are returned from CertificateObtainer

Path	Synopsis
test