var File_internal_proto_v2_s2a_context_s2a_context_proto protoreflect.FileDescriptor
type S2AContext struct { // The SPIFFE ID from the peer leaf certificate, if present. // // This field is only populated if the leaf certificate is a valid SPIFFE // SVID; in particular, there is a unique URI SAN and this URI SAN is a valid // SPIFFE ID. LeafCertSpiffeId string `protobuf:"bytes,1,opt,name=leaf_cert_spiffe_id,json=leafCertSpiffeId,proto3" json:"leaf_cert_spiffe_id,omitempty"` // The URIs that are present in the SubjectAltName extension of the peer leaf // certificate. // // Note that the extracted URIs are not validated and may not be properly // formatted. LeafCertUris []string `protobuf:"bytes,2,rep,name=leaf_cert_uris,json=leafCertUris,proto3" json:"leaf_cert_uris,omitempty"` // The DNSNames that are present in the SubjectAltName extension of the peer // leaf certificate. LeafCertDnsnames []string `protobuf:"bytes,3,rep,name=leaf_cert_dnsnames,json=leafCertDnsnames,proto3" json:"leaf_cert_dnsnames,omitempty"` // The (ordered) list of fingerprints in the certificate chain used to verify // the given leaf certificate. The order MUST be from leaf certificate // fingerprint to root certificate fingerprint. // // A fingerprint is the base-64 encoding of the SHA256 hash of the // DER-encoding of a certificate. The list MAY be populated even if the peer // certificate chain was NOT validated successfully. PeerCertificateChainFingerprints []string `protobuf:"bytes,4,rep,name=peer_certificate_chain_fingerprints,json=peerCertificateChainFingerprints,proto3" json:"peer_certificate_chain_fingerprints,omitempty"` // The local identity used during session setup. LocalIdentity *common_go_proto.Identity `protobuf:"bytes,5,opt,name=local_identity,json=localIdentity,proto3" json:"local_identity,omitempty"` // The SHA256 hash of the DER-encoding of the local leaf certificate used in // the handshake. LocalLeafCertFingerprint []byte `protobuf:"bytes,6,opt,name=local_leaf_cert_fingerprint,json=localLeafCertFingerprint,proto3" json:"local_leaf_cert_fingerprint,omitempty"` // contains filtered or unexported fields }
func (*S2AContext) Descriptor() ([]byte, []int)
Deprecated: Use S2AContext.ProtoReflect.Descriptor instead.
func (x *S2AContext) GetLeafCertDnsnames() []string
func (x *S2AContext) GetLeafCertSpiffeId() string
func (x *S2AContext) GetLeafCertUris() []string
func (x *S2AContext) GetLocalIdentity() *common_go_proto.Identity
func (x *S2AContext) GetLocalLeafCertFingerprint() []byte
func (x *S2AContext) GetPeerCertificateChainFingerprints() []string
func (*S2AContext) ProtoMessage()
func (x *S2AContext) ProtoReflect() protoreflect.Message
func (x *S2AContext) Reset()
func (x *S2AContext) String() string