README
¶
safetlsa
safetlsa is a library that generates TLS certificates from TLSA records that are safe to use as trust anchors. It uses name constraints and dehydrated certificates to eliminate most of the attack surface of the X.509 specification.
Projects who use safetlsa
Send a pull request if you'd like to be included.
- TODO
Licence
safetlsa is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
safetlsa is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with safetlsa. If not, see https://www.gnu.org/licenses/.
Documentation
¶
Index ¶
- func GenerateDomainCA(domain string, publicKeyBytes []byte, parentDERBytes []byte, ...) ([]byte, error)
- func GenerateRootCA(commonNamePrefix string) ([]byte, interface{}, error)
- func GenerateTLDCA(domain string, parentDERBytes []byte, parentPrivateKey interface{}) ([]byte, interface{}, error)
- func GenerateTLDExclusionCA(domain string, parentDERBytes []byte, parentPrivateKey interface{}) ([]byte, interface{}, error)
- func GetCertFromTLSA(domain string, tlsa *dns.TLSA, parentDERBytes []byte, ...) ([]byte, error)
- func ValidityShortTerm() time.Duration
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func GenerateDomainCA ¶
func GenerateDomainCA(domain string, publicKeyBytes []byte, parentDERBytes []byte, parentPrivateKey interface{}) ([]byte, error)
Returns cert, error nolint: lll
func GenerateRootCA ¶
Returns cert, private key, error nolint: lll
func GenerateTLDCA ¶
func GenerateTLDCA(domain string, parentDERBytes []byte, parentPrivateKey interface{}) ([]byte, interface{}, error)
Returns cert, private key, error nolint: lll
func GenerateTLDExclusionCA ¶
func GenerateTLDExclusionCA(domain string, parentDERBytes []byte, parentPrivateKey interface{}) ([]byte, interface{}, error)
Returns cert, private key, error nolint: lll
func GetCertFromTLSA ¶
func ValidityShortTerm ¶ added in v0.0.4
Types ¶
This section is empty.
Source Files