jvscrypto

Mar 23, 2023

Changes in this version

type KeyServer

+ func NewKeyServer(ctx context.Context, kmsClient *kms.KeyManagementClient, ...) *KeyServer

type RotationHandler

+ func NewRotationHandler(ctx context.Context, kmsClient *kms.KeyManagementClient, ...) *RotationHandler

+ func (h *RotationHandler) RotateKeys(ctx context.Context) error

Nov 28, 2022

Changes in this version

+ const PrimaryKey

+ const PrimaryLabelPrefix

+ func CryptoKeyVersionsFor(ctx context.Context, client *kms.KeyManagementClient, parentKeys []string) ([]string, error)

+ func GetPrimary(ctx context.Context, kms *kms.KeyManagementClient, key string) (string, error)

+ func PublicKeysFor(ctx context.Context, client *kms.KeyManagementClient, keyVersions []string) (map[string]crypto.PublicKey, error)

+ type JWKSet struct

+ Keys []jwk.Key

+ func JWKSFromPublicKeys(publicKeys map[string]crypto.PublicKey) (*JWKSet, error)

Jul 15, 2022

Changes in this version

+ func FormatJWKString(wks []*ECDSAKey) (string, error)

+ func GetLatestKeyVersion(ctx context.Context, kms *kms.KeyManagementClient, keyName string) (*kmspb.CryptoKeyVersion, error)

+ func PublicKey(ctx context.Context, kms *kms.KeyManagementClient, keyName string) ([]byte, error)

+ func SetPrimary(ctx context.Context, kms *kms.KeyManagementClient, key, versionName string) error

+ func SignToken(token *jwt.Token, signer crypto.Signer) (string, error)

+ func ValidateJWT(keySet jwk.Set, jwtStr string) (*jwt2.Token, error)

+ func VerifyJWTString(ctx context.Context, kms *kms.KeyManagementClient, keyName string, ...) error

+ type Action int8

+ const ActionCreateNew

+ const ActionCreateNewAndPromote

+ const ActionDestroy

+ const ActionDisable

+ const ActionPromote

+ type CertificateActionService struct

+ Handler *RotationHandler

+ KMSClient *kms.KeyManagementClient

+ func (p *CertificateActionService) CertificateAction(ctx context.Context, request *jvspb.CertificateActionRequest) (*jvspb.CertificateActionResponse, error)

+ type ECDSAKey struct

+ Curve string

+ ID string

+ Type string

+ X string

+ Y string

+ func JWKList(ctx context.Context, kms *kms.KeyManagementClient, keyName string) ([]*ECDSAKey, error)

+ type JWKS struct

+ Keys []*ECDSAKey

+ type KeyServer struct

+ Cache *cache.Cache[string]

+ KMSClient *kms.KeyManagementClient

+ PublicKeyConfig *config.PublicKeyConfig

+ func (k *KeyServer) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type RotationHandler struct

+ CryptoConfig *config.CryptoConfig

+ KMSClient *kms.KeyManagementClient

+ func (h *RotationHandler) RotateKey(ctx context.Context, key string) error