auth

package

v0.0.0-...-4380e07 Latest Latest Go to latest Published: May 27, 2022 License: Apache-2.0 Imports: 18 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

View Source

const (
	KeyName     = "key.pem"
	CertName    = "cert.pem"
	CAChainName = "cacerts.pem"
	CAPoolName  = "root.pem"
)

File names used for saving and loading credentials

View Source

const (
	ControllerServerName = "controller.openness"
	EnrollServerName     = "enroll.controller.openness"
)

Community edition controller server names

This section is empty.

func Enroll(certsDir, endpoint string, timeout time.Duration,
	cc CredentialsClient) error

Enroll tries to load credentials from certsDir. If loading failed it requests credentials from endpoint and saves them to certsDir

func LoadCert(path string) (*x509.Certificate, error)

LoadCert verifies file permissions(0644) and loads a certificate

func LoadCerts(path string) ([]*x509.Certificate, error)

LoadCerts verifies file permissions(0644) and loads all certificates If no certificates are found returns an error

func LoadKey(path string) (crypto.PrivateKey, error)

LoadKey verifies file permissions(0644) and loads a PEM encoded PKCS#8 key

func SaveCert(path string, certs ...*x509.Certificate) error

SaveCert saves PEM encoded certificate to a file with permissions set to 0644

func SaveKey(key crypto.PrivateKey, path string) error

SaveKey saves PEM encoded PKCS#8 key to a file with permissions set to 0644

type CredentialsClient interface {
	Get(id *pb.Identity, timeout time.Duration,
		endpoint string) (*pb.Credentials, error)
}

CredentialsClient is the interface that wraps Get method Get gets credentials from the endpoint using provided id

type EnrollClient struct{}

EnrollClient implements CredentialsClient interface

func (c EnrollClient) Get(id *pb.Identity, timeout time.Duration,
	endpoint string) (*pb.Credentials, error)

Get gets credentials from gRPC endpoint using TLS connection

Path	Synopsis
pb