Nate Brown e4daed3563 Make sure all vpnAddrs are hoisted to primary, resolve a few more TODOs (#1319) 5 månader sedan
..
Makefile 08ac65362e Cert interface (#1212) 9 månader sedan
README.md f2c32421c4 Support for ipv6 in the overlay with v2 certificates 9 månader sedan
asn1.go f2c32421c4 Support for ipv6 in the overlay with v2 certificates 9 månader sedan
ca_pool.go 3f31517018 [cert-v2] nebula-cert should verify all certs (#1291) 6 månader sedan
ca_pool_test.go f30085eab8 Fixup cert package tests (#1253) 8 månader sedan
cert.go e4daed3563 Make sure all vpnAddrs are hoisted to primary, resolve a few more TODOs (#1319) 5 månader sedan
cert_v1.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
cert_v1.pb.go 08ac65362e Cert interface (#1212) 9 månader sedan
cert_v1.proto 08ac65362e Cert interface (#1212) 9 månader sedan
cert_v1_test.go f30085eab8 Fixup cert package tests (#1253) 8 månader sedan
cert_v2.asn1 f2c32421c4 Support for ipv6 in the overlay with v2 certificates 9 månader sedan
cert_v2.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
cert_v2_test.go 8adba3960b finish off cert-v2 TODOs 8 månader sedan
crypto.go 08ac65362e Cert interface (#1212) 9 månader sedan
crypto_test.go 08ac65362e Cert interface (#1212) 9 månader sedan
errors.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
helper_test.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
pem.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
pem_test.go 08ac65362e Cert interface (#1212) 9 månader sedan
sign.go 8704047395 enforce certificate correctness in TBSCertificate.SignWith (#1266) 6 månader sedan
sign_test.go 8adba3960b finish off cert-v2 TODOs 8 månader sedan

README.md

cert

This is a library for interacting with nebula style certificates and authorities.

There are now 2 versions of nebula certificates:

v1

This version is deprecated.

A protobuf definition of the certificate format is included at cert_v1.proto

To compile the definition you will need protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make proto

v2

This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.

cert_v2.asn1 defines the wire format and can be used to compile marshalers.