puppetlabs.ssl-utils.simple
cert-validity-datesclj
(cert-validity-dates ca-ttl)Inputs: [ca-ttl :- schema/Int] Returns: SSLValidDateRange
Calculate the not-before & not-after dates that define a certificate's
period of validity. The value of ca-ttl is expected to be in seconds,
and the dates will be based on the current time. Returns a map in the
form {:not-before Date :not-after Date}.
Inputs: [ca-ttl :- schema/Int]
Returns: SSLValidDateRange
Calculate the not-before & not-after dates that define a certificate's
period of validity. The value of `ca-ttl` is expected to be in seconds,
and the dates will be based on the current time. Returns a map in the
form {:not-before Date :not-after Date}.default-keylengthclj
The default bit length to use when generating keys. Note that all API functions accept an `options' map which may have a :keylength for specifying this value.
The default bit length to use when generating keys. Note that all API functions accept an `options' map which may have a :keylength for specifying this value.
gen-certclj
(gen-cert certname ca-cert serial)(gen-cert certname ca-cert serial options)(gen-cert certname ca-cert serial options ca?)Inputs: ([certname ca-cert serial] [certname ca-cert serial options] [certname :- schema/Str ca-cert :- SSLCert serial :- schema/Int options :- SSLOptions ca? :- schema/Bool]) Returns: SSLCert
Generate a certificate. An optional map may be provided to specify:
- :keylength Bit length to use for the public/private keys; defaults to 4096.
- :extensions List of certificate extensions to include on the certificate; defaults to [].
Inputs: ([certname ca-cert serial] [certname ca-cert serial options] [certname :- schema/Str ca-cert :- SSLCert serial :- schema/Int options :- SSLOptions ca? :- schema/Bool])
Returns: SSLCert
Generate a certificate. An optional map may be provided to specify:
* :keylength Bit length to use for the public/private keys;
defaults to 4096.
* :extensions List of certificate extensions to include on the certificate;
defaults to [].gen-cert*clj
(gen-cert* ca-keys host-keys serial)(gen-cert* ca-keys host-keys serial options)(gen-cert* ca-keys host-keys serial options ca?)Inputs: ([ca-keys host-keys serial] [ca-keys host-keys serial options] [ca-keys :- (schema/conditional (fn [cert] (some (fn* [p1__6911#] (= :cert p1__6911#)) (keys cert))) SSLCert :else SSLKeyPair) host-keys :- SSLKeyPair serial :- schema/Int options :- SSLOptions ca? :- schema/Bool]) Returns: X509Certificate
Internal helper function to generate a certificate; see `gen-cert' for the public version of this function. An optional map may be provided to specify:
- :extensions List of certificate extensions to include on the certificate; defaults to [].
Inputs: ([ca-keys host-keys serial] [ca-keys host-keys serial options] [ca-keys :- (schema/conditional (fn [cert] (some (fn* [p1__6911#] (= :cert p1__6911#)) (keys cert))) SSLCert :else SSLKeyPair) host-keys :- SSLKeyPair serial :- schema/Int options :- SSLOptions ca? :- schema/Bool])
Returns: X509Certificate
Internal helper function to generate a certificate; see `gen-cert' for the
public version of this function.
An optional map may be provided to specify:
* :extensions List of certificate extensions to include on the certificate;
defaults to [].gen-crlclj
(gen-crl ca-cert)Inputs: [ca-cert :- SSLCert] Returns: X509CRL
Inputs: [ca-cert :- SSLCert] Returns: X509CRL
gen-keysclj
(gen-keys certname)(gen-keys certname options)Inputs: ([certname] [certname :- schema/Str options :- SSLOptions]) Returns: SSLKeyPair
Generate public and private keys and the X500 name for the given `certname'. An optional map may be provided to specify:
- :keylength Bit length to use for the public/private keys; defaults to 4096.
Inputs: ([certname] [certname :- schema/Str options :- SSLOptions])
Returns: SSLKeyPair
Generate public and private keys and the X500 name for the given `certname'.
An optional map may be provided to specify:
* :keylength Bit length to use for the public/private keys;
defaults to 4096.gen-self-signed-certclj
(gen-self-signed-cert certname serial)(gen-self-signed-cert certname serial options)(gen-self-signed-cert certname serial options ca?)Inputs: ([certname serial] [certname serial options] [certname :- schema/Str serial :- schema/Int options :- SSLOptions ca? :- schema/Bool]) Returns: SSLCert
Generate a self-signed certificate. An optional map may be provided to specify:
- :keylength Bit length to use for the public/private keys; defaults to 4096.
- :extensions List of certificate extensions to include on the certificate; defaults to [].
Inputs: ([certname serial] [certname serial options] [certname :- schema/Str serial :- schema/Int options :- SSLOptions ca? :- schema/Bool])
Returns: SSLCert
Generate a self-signed certificate.
An optional map may be provided to specify:
* :keylength Bit length to use for the public/private keys;
defaults to 4096.
* :extensions List of certificate extensions to include on the certificate;
defaults to [].ssl-cert?clj
(ssl-cert? x)Returns true if the given map contains all the fields required to define a certificate, keypair, and associated certname info.
Returns true if the given map contains all the fields required to define a certificate, keypair, and associated certname info.
ssl-keys?clj
(ssl-keys? x)Returns true if the given map contains all the fields required to define an SSL keypair and associated certname info.
Returns true if the given map contains all the fields required to define an SSL keypair and associated certname info.
SSLCertclj
A schema for the map used to describe an SSL Certificate internally.
A schema for the map used to describe an SSL Certificate internally.
SSLKeyPairclj
A schema for the map used to describe an SSL KeyPair internally.
A schema for the map used to describe an SSL KeyPair internally.
SSLOptionsclj
A schema for the SSL Options that can be used with the cert and key generation functions.
A schema for the SSL Options that can be used with the cert and key generation functions.
SSLValidDateRangeclj
A schema for the map representing a valid date range for an SSL certificate.
A schema for the map representing a valid date range for an SSL certificate.
validity-date-range?clj
(validity-date-range? x)Returns true if the given map contains all the fields required to define a validity date range for a certificate.
Returns true if the given map contains all the fields required to define a validity date range for a certificate.
cljdoc is a website building & hosting documentation for Clojure/Script libraries
× close