mirror of
https://github.com/slackhq/nebula.git
synced 2025-11-11 22:53:58 +01:00
8704047395
* enforce certificate correctness in TBSCertificate.SignWith * check length, not nil * Address review comments * github hates me --------- Co-authored-by: Nate Brown <nbrown.us@gmail.com> Co-authored-by: Jack Doan <me@jackdoan.com>
cert
This is a library for interacting with nebula style certificates and authorities.
There are now 2 versions of nebula certificates:
v1
This version is deprecated.
A protobuf definition of the certificate format is included at cert_v1.proto
To compile the definition you will need protoc installed.
To compile for go with the same version of protobuf specified in go.mod:
make proto
v2
This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.
cert_v2.asn1 defines the wire format and can be used to compile marshalers.