nebula/cert
Nate Brown f2c32421c4 Support for ipv6 in the overlay with v2 certificates
---------

Co-authored-by: Jack Doan <jackdoan@rivian.com>
2024-10-23 22:25:20 -05:00
..
Makefile Cert interface (#1212) 2024-10-10 18:00:22 -05:00
README.md Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
asn1.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
ca_pool.go Cert interface (#1212) 2024-10-10 18:00:22 -05:00
ca_pool_test.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
cert.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
cert_test.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
cert_v1.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
cert_v1.pb.go Cert interface (#1212) 2024-10-10 18:00:22 -05:00
cert_v1.proto Cert interface (#1212) 2024-10-10 18:00:22 -05:00
cert_v2.asn1 Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
cert_v2.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
crypto.go Cert interface (#1212) 2024-10-10 18:00:22 -05:00
crypto_test.go Cert interface (#1212) 2024-10-10 18:00:22 -05:00
errors.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
pem.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00
pem_test.go Cert interface (#1212) 2024-10-10 18:00:22 -05:00
sign.go Support for ipv6 in the overlay with v2 certificates 2024-10-23 22:25:20 -05:00

README.md

cert

This is a library for interacting with nebula style certificates and authorities.

There are now 2 versions of nebula certificates:

v1

This version is deprecated.

A protobuf definition of the certificate format is included at cert_v1.proto

To compile the definition you will need protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make proto

v2

This is the latest version which uses asn.1 DER encoding. It can support ipv4 and ipv6 and tolerate future certificate changes better than v1.

cert_v2.asn1 defines the wire format and can be used to compile marshalers.