brad-defined 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
..
Makefile 08ac65362e Cert interface (#1212) hace 2 años
README.md d97ed57a19 V2 certificate format (#1216) hace 1 año
asn1.go d97ed57a19 V2 certificate format (#1216) hace 1 año
ca_pool.go d97ed57a19 V2 certificate format (#1216) hace 1 año
ca_pool_test.go 088af8edb2 Enable running testifylint in CI (#1350) hace 1 año
cert.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
cert_v1.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
cert_v1.pb.go 08ac65362e Cert interface (#1212) hace 2 años
cert_v1.proto 08ac65362e Cert interface (#1212) hace 2 años
cert_v1_test.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
cert_v2.asn1 d97ed57a19 V2 certificate format (#1216) hace 1 año
cert_v2.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
cert_v2_test.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
crypto.go 08ac65362e Cert interface (#1212) hace 2 años
crypto_test.go 2dc30fc300 Support 32-bit machines in crypto test (#1394) hace 1 año
errors.go 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) hace 9 meses
helper_test.go d97ed57a19 V2 certificate format (#1216) hace 1 año
pem.go 3ec527e42c cert.MarshalSigningPublicKeyToPEM should emit the 'ECDSA' variant of the banner (#1552) hace 10 meses
pem_test.go 8824eeaea2 helper functions to more correctly marshal curve 25519 public keys (#1481) hace 1 año
sign.go 1ea5f776d7 update to go 1.25, use the cool new ECDSA key marshalling functions (#1483) hace 1 año
sign_test.go 088af8edb2 Enable running testifylint in CI (#1350) hace 1 año

README.md

cert

This is a library for interacting with nebula style certificates and authorities.

There are now 2 versions of nebula certificates:

v1

This version is deprecated.

A protobuf definition of the certificate format is included at cert_v1.proto

To compile the definition you will need protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make proto

v2

This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.

cert_v2.asn1 defines the wire format and can be used to compile marshalers.