You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
43 lines
1.3 KiB
Go
43 lines
1.3 KiB
Go
package scep
|
|
|
|
import (
|
|
"context"
|
|
"crypto"
|
|
"crypto/x509"
|
|
"time"
|
|
|
|
"github.com/smallstep/certificates/authority/provisioner"
|
|
)
|
|
|
|
// Provisioner is an interface that implements a subset of the provisioner.Interface --
|
|
// only those methods required by the SCEP api/authority.
|
|
type Provisioner interface {
|
|
AuthorizeSign(ctx context.Context, token string) ([]provisioner.SignOption, error)
|
|
GetName() string
|
|
DefaultTLSCertDuration() time.Duration
|
|
GetOptions() *provisioner.Options
|
|
GetCapabilities() []string
|
|
ShouldIncludeRootInChain() bool
|
|
GetDecrypter() (*x509.Certificate, crypto.Decrypter)
|
|
GetContentEncryptionAlgorithm() int
|
|
ValidateChallenge(ctx context.Context, challenge, transactionID string) error
|
|
}
|
|
|
|
// provisionerKey is the key type for storing and searching a
|
|
// SCEP provisioner in the context.
|
|
type provisionerKey struct{}
|
|
|
|
// provisionerFromContext searches the context for a SCEP provisioner.
|
|
// Returns the provisioner or panics if no SCEP provisioner is found.
|
|
func provisionerFromContext(ctx context.Context) Provisioner {
|
|
p, ok := ctx.Value(provisionerKey{}).(Provisioner)
|
|
if !ok {
|
|
panic("SCEP provisioner expected in request context")
|
|
}
|
|
return p
|
|
}
|
|
|
|
func NewProvisionerContext(ctx context.Context, p Provisioner) context.Context {
|
|
return context.WithValue(ctx, provisionerKey{}, p)
|
|
}
|