Package extensions defines cryptographic extensions for OpenShift.

EnsureCA returns a CA, whether it was created (as opposed to pre-existing), and any error if serialFile is empty, a RandomSerialGenerator will be used.

if serialFile is empty, a RandomSerialGenerator will be used.

if serialFile is empty, a RandomSerialGenerator will be used.

SecureTLSConfig enforces the default minimum security settings for the cluster.

5 years.

2 years.

RandomSerialGenerator returns a serial based on time.Now and the subject.

SerialFileGenerator returns a unique, monotonically increasing serial number and ensures the CA on disk records that value.

SerialGenerator is an interface for getting a serial number for the cert.

CertificateExtensionFunc is passed a certificate that it may extend, or return an error if the extension attempt failed.