Andy Doan daeb60a63a Create a flexible TLS server abstraction ...

This project needs to be run in 2 different ways:

 * Directly in a customer environment (typical TLS requirements)
 * multi-tenant K8s in foundries backend (like our device-gateway and
   ostree-hub).

In the multi-tenant case, we have special logic to look at the incoming
SNI information in the request and use the correct certs for a factory.

This commit introduces the abstraction and simple single-tenant
implementation. Foundries can then extend this project with their own
handler to satisfy their requirements.

Signed-off-by: Andy Doan <andy@foundries.io>

2022-10-10 16:36:56 -05:00

go.mod

EST 4.1.2: CA Certificate Request

2022-10-10 14:11:59 -05:00

go.sum

EST 4.1.2: CA Certificate Request

2022-10-10 14:11:59 -05:00

log.go

Initial commit

2022-10-10 13:13:57 -05:00

service_test.go

EST 4.2.2: Simple Re-enrollment of Clients

2022-10-10 14:25:18 -05:00

service.go

EST: Document what's implemented and not implemented

2022-10-10 16:36:55 -05:00

tls_handler_static_test.go

Create a flexible TLS server abstraction

2022-10-10 16:36:56 -05:00

tls_handler_static.go

Create a flexible TLS server abstraction

2022-10-10 16:36:56 -05:00

tls_handler.go

Create a flexible TLS server abstraction

2022-10-10 16:36:56 -05:00

Description

Enrollment over Secure Transport (EST) server implementation

BSD-3-Clause 98 KiB

Languages

Go 94.3%

Shell 4.3%

Makefile 1.4%