DecodeFirstPEM find valid pem block in bytes and decode the first block.

DecodePEMs decode input pem bytes to pem blocks.

DecryptPrivateKeyBytes takes a password encrypted PEM block and the password used to encrypt it and returns a slice of decrypted DER encoded bytes.

DecryptPrivateKeyFile takes a password encrypted key file and the password used to encrypt it and returns a slice of decrypted DER encoded bytes.

LoadX509KeyPair reads and parses a public/private key pair from a pair of files.

LoadX509KeyPairWithPassword parses a encryption public/private key pair from a pair of PEM encoded data.

MarshalCertToPEM returns a pemBlock for x509 certificate.

MarshalCSRToPEM returns a pemBlock for certificate request.

MarshalECPrivateKeyToPEM converts an EC private key to SEC 1, ASN.1 DER form.

MarshalPrivateKeyToPEM converts the private key to PEM block.

MarshalRSAPrivateKeyToPEM converts an RSA private key to PKCS #1, ASN.1 DER form.

NewCSR returns a new x509 certificate request.

NewECPrivateKey create a new ECDSA provate key by curve.

NewPEMBlock creates a new PEM struct from pem.Block.

NewRSAPrivateKey creates a new RSA private key.

NewSelfSignedCACert returns a new self-signed CA x509 certificate.

NewSelfSignedCert returns a new self-signed x509 certificate.

NewSignedCert returns a new certificate signed by given ca key and certificate.

ParseCertPEM decode first valid certificate pem blocks to x509 certificate.

ParseCertsPEM decode all valid certificate pem blocks to x509 certificates.

ParsePrivateKeyPEM find and decode the first valid private key pem block, then convert it to crypto.PrivateKey(maybe rsa.PrivateKey or ecdsa.PrivateKey).

X509KeyPair parses a public/private key pair from a pair of PEM encoded data.

X509KeyPairWithPassword parses a public/private key pair from a pair of PEM encoded data.

CertificatePEMBlockType is a possible value for pem.Block.Type.

CertificateRequestPEMBlockType is a possible value for pem.Block.Type.

ECPrivateKeyPEMBlockType is a possible value for pem.Block.Type.

PrivateKeyBlockType is a possible value for pem.Block.Type.

RASPrivateKeyPEMBlockType is a possible value for pem.Block.Type.

AltNames contains the domain names and IP addresses that will be added to the API Server's x509 certificate SubAltNames field.

Config contains various common Config for creating a certificate.

PEMBlock contains the raw bytes and a block of pem.

PkixName represents an X.509 distinguished name.

TLSCertificate represents the external cert api secret for https.