forked from TrueCloudLab/certificates
43 lines
1 KiB
Go
43 lines
1 KiB
Go
package kms
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/smallstep/certificates/kms/apiv1"
|
|
|
|
// Enable default implementation
|
|
"github.com/smallstep/certificates/kms/softkms"
|
|
)
|
|
|
|
// KeyManager is the interface implemented by all the KMS.
|
|
type KeyManager = apiv1.KeyManager
|
|
|
|
// CertificateManager is the interface implemented by the KMS that can load and
|
|
// store x509.Certificates.
|
|
type CertificateManager = apiv1.CertificateManager
|
|
|
|
// Options are the KMS options. They represent the kms object in the ca.json.
|
|
type Options = apiv1.Options
|
|
|
|
// Default is the implementation of the default KMS.
|
|
var Default = &softkms.SoftKMS{}
|
|
|
|
// New initializes a new KMS from the given type.
|
|
func New(ctx context.Context, opts apiv1.Options) (KeyManager, error) {
|
|
if err := opts.Validate(); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
t := apiv1.Type(strings.ToLower(opts.Type))
|
|
if t == apiv1.DefaultKMS {
|
|
t = apiv1.SoftKMS
|
|
}
|
|
|
|
fn, ok := apiv1.LoadKeyManagerNewFunc(t)
|
|
if !ok {
|
|
return nil, errors.Errorf("unsupported kms type '%s'", t)
|
|
}
|
|
return fn(ctx, opts)
|
|
}
|