providers

package

v1.2.0 Latest Latest Go to latest Published: Aug 20, 2025 License: Apache-2.0 Imports: 19 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/beezy-dev/kleidi

Links

Documentation ¶

Overview ¶

Hashicorp Vault iteration of the PKCS11 interface from KMSv2 mockup example Author: [email protected] Apache 2.0 License

Index ¶

Variables
func NewPKCS11RemoteService(configFilePath, keyID string) (service.Service, error)
func NewTPMRemoteService()
func NewVaultClientRemoteService(configFilePath string) (service.Service, error)
func StoreKeyTPM()
func TmpPlaceholder()
func WrapVaultError(errString string) error

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrInvalidToken = &hVaultErr{StatusCode: 403, originalError: "invalid token"}
	ErrVaultSealed  = &hVaultErr{StatusCode: 503, originalError: "Vault is sealed"}
)

Pre-defined constant errors for specific conditions.

Functions ¶

func NewPKCS11RemoteService ¶

func NewPKCS11RemoteService(configFilePath, keyID string) (service.Service, error)

NewPKCS11RemoteService creates a new PKCS11 remote service with SoftHSMv2 configuration file and keyID

func NewTPMRemoteService ¶

func NewTPMRemoteService()

start a service

func NewVaultClientRemoteService ¶

func NewVaultClientRemoteService(configFilePath string) (service.Service, error)

func StoreKeyTPM ¶

func StoreKeyTPM()

func TmpPlaceholder ¶

func TmpPlaceholder()

func WrapVaultError ¶ added in v1.2.0

func WrapVaultError(errString string) error

WrapVaultError parses a raw Vault error string and wraps it in a structured hVaultErr. It uses regular expressions to extract key information.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL