sashakoshka/go-gemini
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document CertificateOptions

Browse Source
This commit is contained in:
Adnan Maolood 2020-11-05 00:04:58 -05:00
parent cec1f118fb
commit 53390dad6b
1 changed files with 26 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
cert.go
View File

@ -89,13 +89,31 @@ func (c *CertificateStore) Load(path string) error {
return nil return nil
} }
// CertificateOptions configures how a certificate is created. // CertificateOptions configures the creation of a certificate.
type CertificateOptions struct { type CertificateOptions struct {
// Subject Alternate Name values.
// Should contain the IP addresses that the certificate is valid for.
IPAddresses []net.IP IPAddresses []net.IP
// Subject Alternate Name values.
// Should contain the DNS names that this certificate is valid for.
// E.g. example.com, *.example.com
DNSNames []string DNSNames []string
// Subject specifies the certificate Subject.
//
// Subject.CommonName can contain the DNS name that this certificate
// is valid for. Server certificates should specify both a Subject
// and a Subject Alternate Name.
Subject pkix.Name Subject pkix.Name
// Duration specifies the amount of time that the certificate is valid for.
Duration time.Duration Duration time.Duration
ED25519 bool
// Ed25519 specifies whether to generate an Ed25519 key pair.
// If false, an ECDSA key will be generated instead.
// Ed25519 is not as widely supported as ECDSA.
Ed25519 bool
} }
// CreateCertificate creates a new TLS certificate. // CreateCertificate creates a new TLS certificate.
@ -115,8 +133,8 @@ func CreateCertificate(options CertificateOptions) (tls.Certificate, error) {
func newX509KeyPair(options CertificateOptions) (*x509.Certificate, crypto.PrivateKey, error) { func newX509KeyPair(options CertificateOptions) (*x509.Certificate, crypto.PrivateKey, error) {
var pub crypto.PublicKey var pub crypto.PublicKey
var priv crypto.PrivateKey var priv crypto.PrivateKey
if options.ED25519 { if options.Ed25519 {
// Generate an ED25519 private key // Generate an Ed25519 private key
var err error var err error
pub, priv, err = ed25519.GenerateKey(rand.Reader) pub, priv, err = ed25519.GenerateKey(rand.Reader)
if err != nil { if err != nil {
@ -132,7 +150,7 @@ func newX509KeyPair(options CertificateOptions) (*x509.Certificate, crypto.Priva
pub = &private.PublicKey pub = &private.PublicKey
} }
// ECDSA and ED25519 keys should have the DigitalSignature KeyUsage bits // ECDSA and Ed25519 keys should have the DigitalSignature KeyUsage bits
// set in the x509.Certificate template // set in the x509.Certificate template
keyUsage := x509.KeyUsageDigitalSignature keyUsage := x509.KeyUsageDigitalSignature