package utils

import "github.com/containerd/containerd/pkg/encryption/utils"

Index ¶

• func CertifyKey(pubbytes []byte, template *x509.Certificate, caKey *rsa.PrivateKey, caCert *x509.Certificate) (*x509.Certificate, error)
• func CreateECDSATestKey(curve elliptic.Curve) ([]byte, []byte, error)
• func CreateRSAKey(bits int) (*rsa.PrivateKey, error)
• func CreateRSATestKey(bits int, password []byte, pemencode bool) ([]byte, []byte, error)
• func CreateTestCA() (*rsa.PrivateKey, *x509.Certificate, error)
• func IsCertificate(data []byte) bool
• func IsGPGPrivateKeyRing(data []byte) bool
• func IsPasswordError(err error) bool
• func IsPrivateKey(data []byte, password []byte) (bool, error)
• func IsPublicKey(data []byte) bool
• func ParseCertificate(certBytes []byte, prefix string) (*x509.Certificate, error)
• func ParsePrivateKey(privKey, privKeyPassword []byte, prefix string) (interface{}, error)
• func ParsePublicKey(pubKey []byte, prefix string) (interface{}, error)
• func SortDecryptionKeys(b64ItemList string) (map[string][][]byte, error)

Functions ¶

func CertifyKey ¶

func CertifyKey(pubbytes []byte, template *x509.Certificate, caKey *rsa.PrivateKey, caCert *x509.Certificate) (*x509.Certificate, error)

CertifyKey certifies a public key using the given CA's private key and cert; The certificate template for the public key is optional

func CreateECDSATestKey ¶

func CreateECDSATestKey(curve elliptic.Curve) ([]byte, []byte, error)

CreateECDSATestKey creates and elliptic curve key for the given curve and returns the public and private key in DER format

func CreateRSAKey ¶

func CreateRSAKey(bits int) (*rsa.PrivateKey, error)

CreateRSAKey creates an RSA key

func CreateRSATestKey ¶

func CreateRSATestKey(bits int, password []byte, pemencode bool) ([]byte, []byte, error)

CreateRSATestKey creates an RSA key of the given size and returns the public and private key in PEM or DER format

func CreateTestCA ¶

func CreateTestCA() (*rsa.PrivateKey, *x509.Certificate, error)

CreateTestCA creates a root CA for testing

func IsCertificate ¶

func IsCertificate(data []byte) bool

IsCertificate returns true in case the given byte array represents an x.509 certificate

func IsGPGPrivateKeyRing ¶

func IsGPGPrivateKeyRing(data []byte) bool

IsGPGPrivateKeyRing returns true in case the given byte array represents a GPG private key ring file

func IsPasswordError ¶

func IsPasswordError(err error) bool

IsPasswordError checks whether an error is related to a missing or wrong password

func IsPrivateKey ¶

func IsPrivateKey(data []byte, password []byte) (bool, error)

IsPrivateKey returns true in case the given byte array represents a private key It returns an error if for example the password is wrong

func IsPublicKey ¶

func IsPublicKey(data []byte) bool

IsPublicKey returns true in case the given byte array represents a public key

func ParseCertificate ¶

func ParseCertificate(certBytes []byte, prefix string) (*x509.Certificate, error)

ParseCertificate tries to parse a public key in DER format first and PEM format after, returning an error if the parsing failed

func ParsePrivateKey ¶

func ParsePrivateKey(privKey, privKeyPassword []byte, prefix string) (interface{}, error)

ParsePrivateKey tries to parse a private key in DER format first and PEM format after, returning an error if the parsing failed

func ParsePublicKey ¶

func ParsePublicKey(pubKey []byte, prefix string) (interface{}, error)

ParsePublicKey tries to parse a public key in DER format first and PEM format after, returning an error if the parsing failed

func SortDecryptionKeys ¶

func SortDecryptionKeys(b64ItemList string) (map[string][][]byte, error)

SortDecryptionKeys parses a list of comma separated base64 entries and sorts the data into a map. Each entry in the list may be either a GPG private key ring, private key, or x.509 certificate

Source Files ¶

testing.go utils.go