Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authority

package

Go to main page

Versions in this module

v0

v0.9.0

Jan 8, 2022

v0.8.4

Oct 12, 2021

v0.8.3

Sep 3, 2021

v0.8.2

Jul 27, 2021

v0.8.1

Jul 27, 2021

v0.8.0

Jun 24, 2021

Changes in this version

+ var CTPoisonOID = asn1.ObjectIdentifier

+ var DefaultCRLExpiry = 30 * 24 * time.Hour

+ var DefaultCRLRenewal = 7 * 24 * time.Hour

+ var DefaultOCSPExpiry = 1 * 24 * time.Hour

+ var SCTListOID = asn1.ObjectIdentifier

+ func NewRoot(profile string, cfg *Config, provider cryptoprov.Provider, ...) (certPEM, csrPEM, key []byte, err error)

+ func NewSignerFromFromFile(crypto *cryptoprov.Crypto, caKeyFile string) (crypto.Signer, error)

+ func NewSignerFromPEM(prov *cryptoprov.Crypto, caKey []byte) (crypto.Signer, error)

+ type AIAConfig struct

+ AiaURL string

+ CRLExpiry time.Duration

+ CRLRenewal time.Duration

+ CrlURL string

+ OCSPExpiry time.Duration

+ OcspURL string

+ func (c *AIAConfig) Copy() *AIAConfig

+ func (c *AIAConfig) GetCRLExpiry() time.Duration

+ func (c *AIAConfig) GetCRLRenewal() time.Duration

+ func (c *AIAConfig) GetOCSPExpiry() time.Duration

+ type Authority struct

+ func NewAuthority(cfg *Config, crypto *cryptoprov.Crypto) (*Authority, error)

+ func (s *Authority) GetIssuerByLabel(label string) (*Issuer, error)

+ func (s *Authority) GetIssuerByProfile(profile string) (*Issuer, error)

+ func (s *Authority) Issuers() []*Issuer

+ type CAConfig struct

+ DefaultAIA *AIAConfig

+ Issuers []IssuerConfig

+ PrivateRoots []string

+ PublicRoots []string

+ type CAConstraint struct

+ IsCA bool

+ MaxPathLen int

+ type CertProfile struct

+ AllowedCSRFields *csr.AllowedFields

+ AllowedDNS string

+ AllowedDNSRegex *regexp.Regexp

+ AllowedEmail string

+ AllowedEmailRegex *regexp.Regexp

+ AllowedExtensions []csr.OID

+ AllowedNames string

+ AllowedNamesRegex *regexp.Regexp

+ AllowedRoles []string

+ AllowedURI string

+ AllowedURIRegex *regexp.Regexp

+ Backdate csr.Duration

+ CAConstraint CAConstraint

+ DeniedRoles []string

+ Description string

+ Expiry csr.Duration

+ IssuerLabel string

+ OCSPNoCheck bool

+ Policies []csr.CertificatePolicy

+ Usage []string

+ func DefaultCertProfile() *CertProfile

+ func (p *CertProfile) AllowedExtensionsStrings() []string

+ func (p *CertProfile) Copy() *CertProfile

+ func (p *CertProfile) IsAllowed(role string) bool

+ func (p *CertProfile) IsAllowedExtention(oid csr.OID) bool

+ func (p *CertProfile) Usages() (ku x509.KeyUsage, eku []x509.ExtKeyUsage, unk []string)

+ func (p *CertProfile) Validate() error

+ type Config struct

+ Authority *CAConfig

+ Profiles map[string]*CertProfile

+ func LoadConfig(path string) (*Config, error)

+ func (c *Config) Copy() *Config

+ func (c *Config) DefaultCertProfile() *CertProfile

+ func (c *Config) Validate() error

+ type Issuer struct

+ func CreateIssuer(cfg *IssuerConfig, certBytes, intCAbytes, rootBytes []byte, ...) (*Issuer, error)

+ func NewIssuer(cfg *IssuerConfig, prov *cryptoprov.Crypto) (*Issuer, error)

+ func (ca *Issuer) AiaURL() string

+ func (ca *Issuer) Bundle() *certutil.Bundle

+ func (ca *Issuer) CrlExpiry() time.Duration

+ func (ca *Issuer) CrlRenewal() time.Duration

+ func (ca *Issuer) CrlURL() string

+ func (ca *Issuer) KeyHash(h crypto.Hash) []byte

+ func (ca *Issuer) Label() string

+ func (ca *Issuer) OcspExpiry() time.Duration

+ func (ca *Issuer) OcspURL() string

+ func (ca *Issuer) PEM() string

+ func (ca *Issuer) Profile(name string) *CertProfile

+ func (ca *Issuer) Sign(req csr.SignRequest) (*x509.Certificate, []byte, error)

+ func (ca *Issuer) Signer() crypto.Signer

+ func (ca *Issuer) SubjectKID() string

+ type IssuerConfig struct

+ AIA *AIAConfig

+ CABundleFile string

+ CertFile string

+ Disabled *bool

+ KeyFile string

+ Label string

+ Profiles map[string]*CertProfile

+ RootBundleFile string

+ Type string

+ func (c *IssuerConfig) Copy() *IssuerConfig

+ func (c *IssuerConfig) GetDisabled() bool