mirror of https://github.com/docker/cli.git
35 lines
1.1 KiB
Go
35 lines
1.1 KiB
Go
|
// +build pkcs11
|
||
|
|
|
||
|
|
package client
|
||
|
|
|
||
|
|
import (
|
||
|
|
"fmt"
|
||
|
|
"net/http"
|
||
|
|
|
||
|
|
"github.com/docker/notary"
|
||
|
|
"github.com/docker/notary/trustmanager"
|
||
|
|
"github.com/docker/notary/trustmanager/yubikey"
|
||
|
|
"github.com/docker/notary/trustpinning"
|
||
|
|
)
|
||
|
|
|
||
|
|
// NewNotaryRepository is a helper method that returns a new notary repository.
|
||
|
|
// It takes the base directory under where all the trust files will be stored
|
||
|
|
// (usually ~/.docker/trust/).
|
||
|
|
func NewNotaryRepository(baseDir, gun, baseURL string, rt http.RoundTripper,
|
||
|
|
retriever notary.PassRetriever, trustPinning trustpinning.TrustPinConfig) (
|
||
|
|
*NotaryRepository, error) {
|
||
|
|
|
||
|
|
fileKeyStore, err := trustmanager.NewKeyFileStore(baseDir, retriever)
|
||
|
|
if err != nil {
|
||
|
|
return nil, fmt.Errorf("failed to create private key store in directory: %s", baseDir)
|
||
|
|
}
|
||
|
|
|
||
|
|
keyStores := []trustmanager.KeyStore{fileKeyStore}
|
||
|
|
yubiKeyStore, _ := yubikey.NewYubiStore(fileKeyStore, retriever)
|
||
|
|
if yubiKeyStore != nil {
|
||
|
|
keyStores = []trustmanager.KeyStore{yubiKeyStore, fileKeyStore}
|
||
|
|
}
|
||
|
|
|
||
|
|
return repositoryFromKeystores(baseDir, gun, baseURL, rt, keyStores, trustPinning)
|
||
|
|
}
|