cert

type AltNames ¶

type AltNames struct {
	DNSNames map[string]string
	IPs      map[string]net.IP
}

AltNames contains the domain names and IP addresses that will be added to the API Server's x509 certificate SubAltNames field. The values will be passed directly to the x509.Certificate object.

type AuthorityCertificateGenerator ¶

type AuthorityCertificateGenerator struct {
	// contains filtered or unexported fields
}

func (m AuthorityCertificateGenerator) Generate() (*x509.Certificate, crypto.Signer, error)

type CertificateDescriptor ¶

type CertificateDescriptor struct {
	CommonName   string
	DNSNames     []string
	Organization []string
	Year         time.Duration
	AltNames     AltNames
	Usages       []x509.ExtKeyUsage
}

CertificateDescriptor contains the basic fields required for creating a certificate

type CertificateFileManger ¶

type CertificateFileManger struct {
	// contains filtered or unexported fields
}

CertificateFileManger Asymmetric encryption, like ca.crt and ca.key

func NewCertificateFileManger(certPath string, certName string) CertificateFileManger

func (c CertificateFileManger) Read() (cert *x509.Certificate, key crypto.Signer, err error)

func (c CertificateFileManger) Write(cert *x509.Certificate, key crypto.Signer) error

type CertificateGenerator ¶

type CertificateGenerator interface {
	Generate() (*x509.Certificate, crypto.Signer, error)
}

func NewAuthorityCertificateGenerator(config CertificateDescriptor) CertificateGenerator

func NewCommonCertificateGenerator(config CertificateDescriptor, caCert *x509.Certificate, caKey crypto.Signer) (CertificateGenerator, error)

type CommonCertificateGenerator ¶

type CommonCertificateGenerator struct {
	// contains filtered or unexported fields
}

func (m CommonCertificateGenerator) Generate() (*x509.Certificate, crypto.Signer, error)

type KeyPairFileGenerator ¶

type KeyPairFileGenerator struct {
	// contains filtered or unexported fields
}

KeyPairFileGenerator write symmetric encryption key, like: sa.key and sa.pub

func NewKeyPairFileGenerator(certPath string, certName string) KeyPairFileGenerator

func (k KeyPairFileGenerator) GenerateAll() error