Files
Jack Doan f573e8a266
Some checks failed
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Merge commit from fork
Newly signed P256 based certificates will have their signature clamped to the low-s form.

Update CHANGELOG.md
2026-02-06 14:26:51 -05:00
..
2026-02-06 14:26:51 -05:00
2025-03-06 11:28:26 -06:00
2026-02-06 14:26:51 -05:00
2026-02-06 14:26:51 -05:00
2024-10-10 18:00:22 -05:00
2024-10-10 18:00:22 -05:00
2025-03-06 11:28:26 -06:00
2026-02-06 14:26:51 -05:00
2024-10-10 18:00:22 -05:00
2025-03-06 11:28:26 -06:00
2024-10-10 18:00:22 -05:00
2025-03-06 11:28:26 -06:00
2026-02-06 14:26:51 -05:00
2026-02-06 14:26:51 -05:00

cert

This is a library for interacting with nebula style certificates and authorities.

There are now 2 versions of nebula certificates:

v1

This version is deprecated.

A protobuf definition of the certificate format is included at cert_v1.proto

To compile the definition you will need protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make proto

v2

This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.

cert_v2.asn1 defines the wire format and can be used to compile marshalers.