Tools for creating and storing SSL certificates.
Certdepot is based off certstrap by Square. This project heavily depends certstrap by expanding its capabilities.
SSL certificates and certificate authorities (CAs) can easily be created and signed using Certdepot.
Certdepot implements a certstrap depot backed by MongoDB. This facilitates the storing and fetching of SSL certificates to and from a Mongo database. There are various functions for maintaining the depot, such as checking for expiration and rotating certs.
Bootsrapping a depot facilitates creating a certificate depot with both a CA and service certificate. BootstrapDepot currently supports bootstrapping FileDepots and MongoDepots.
Create a depot, initialize a CA in the depot, and create and sign service cert with that CA in the depot: :: mongoOpts := certdepot.MongoDBOptions{} // populate options d, err := certdepot.NewMongoDBCertDepot(ctx, mongoOpts) // handle err
- certOpts := certdepot.CertificateOptions{
Organization: "mongodb", Country: "USA", Locality: "NYC", OrganizationalUnit: "evergreen", Province: "Manhattan", Expires: 24 * time.Hour,
IP: []string{"0.0.0.0"}, Domain: []string{"evergreen"}, URI: []string{"evergreen.mongodb.com"}, Host: "evergreen", CA: "ca", CAPassphrase: "passphrase", Intermediate: true,
}
// initialize CA named ca and stores it in the depot certOpts.Init(d) // creates a new certificate named evergreen, signs it with ca, and // stores it in the depot certOpts.CreateCertificate(d)
The following does the same as above, but now using the bootstrap functionality: :: bootstrapConf := certdepot.BootstrapDepotConfig{ MongoDepot: mongoOpts, CAOpts: certOpts, ServiceOpts: certOpts, } d, err := BootstrapDepot(ctx, bootstrapConf)
The certdepot project uses a makefile to coordinate testing.
The makefile provides the following targets:
buildCompiles non-test code.
testRuns all tests, sequentially, for all packages.
test-<package>Runs all tests for a specific package.
race,race-<package>As with their
testcounterpart, these targets run tests with the race detector enabled.lint,lint-<package>Installs and runs the
gometaliterwith appropriate settings to lint the project.
Note that in order for tests to run successfully and local mongod must be running.
File tickets in Jira with the MAKE project.
See the certdepot godoc for complete documentation of certdepot.
See the certstrap godoc for complete documentation of certstrap.