pkix

Documentation

Overview

Package pkix contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.

Package pkix contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.

Index

• type AlgorithmIdentifier
• type AttributeTypeAndValue
  • func (a *AttributeTypeAndValue) MarshalJSON() ([]byte, error)
  • func (a *AttributeTypeAndValue) UnmarshalJSON(b []byte) error
• type AttributeTypeAndValueSET
• type AuxOID
  • func (aux *AuxOID) AsSlice() []int
  • func (aux *AuxOID) CopyAsSlice() []int
  • func (aux *AuxOID) Equal(other *AuxOID) bool
  • func (aux *AuxOID) MarshalJSON() ([]byte, error)
  • func (aux *AuxOID) UnmarshalJSON(b []byte) error
• type CertificateList
  • func (certList *CertificateList) HasExpired(now time.Time) bool
• type EDIPartyName
• type Extension
  • func (ext *Extension) MarshalJSON() ([]byte, error)
  • func (ext *Extension) UnmarshalJSON(b []byte) (err error)
• type Name
  • func (n *Name) FillFromRDNSequence(rdns *RDNSequence)
  • func (n *Name) MarshalJSON() ([]byte, error)
  • func (n *Name) String() string
  • func (n Name) ToRDNSequence() (ret RDNSequence)
  • func (n *Name) UnmarshalJSON(b []byte) error
• type OIDName
• type OtherName
  • func (o *OtherName) MarshalJSON() ([]byte, error)
  • func (o *OtherName) UnmarshalJSON(b []byte) (err error)
• type RDNSequence
  • func (seq RDNSequence) String() string
• type RelativeDistinguishedNameSET
• type RevokedCertificate
• type TBSCertificateList

Types

type AlgorithmIdentifier

type AlgorithmIdentifier struct {
	Algorithm  asn1.ObjectIdentifier
	Parameters asn1.RawValue `asn1:"optional"`
}

AlgorithmIdentifier represents the ASN.1 structure of the same name. See RFC 5280, section 4.1.1.2.

type AttributeTypeAndValue

type AttributeTypeAndValue struct {
	Type  asn1.ObjectIdentifier `json:"type"`
	Value interface{}           `json:"value"`
}

AttributeTypeAndValue mirrors the ASN.1 structure of the same name in http://tools.ietf.org/html/rfc5280#section-4.1.2.4

func (*AttributeTypeAndValue) MarshalJSON

func (a *AttributeTypeAndValue) MarshalJSON() ([]byte, error)

MarshalJSON implements the json.Marshaler interface.

func (*AttributeTypeAndValue) UnmarshalJSON

func (a *AttributeTypeAndValue) UnmarshalJSON(b []byte) error

UnmarshalJSON implements the json.Unmarshaler interface.

type AttributeTypeAndValueSET

type AttributeTypeAndValueSET struct {
	Type  asn1.ObjectIdentifier
	Value [][]AttributeTypeAndValue `asn1:"set"`
}

AttributeTypeAndValueSET represents a set of ASN.1 sequences of AttributeTypeAndValue sequences from RFC 2986 (PKCS #10).

type AuxOID

type AuxOID []int

AuxOID behaves similar to asn1.ObjectIdentifier, except encodes to JSON as a string in dot notation. It is a type synonym for []int, and can be converted to an asn1.ObjectIdentifier by going through []int and back.

func (*AuxOID) AsSlice

func (aux *AuxOID) AsSlice() []int

AsSlice returns a slice over the inner-representation

func (*AuxOID) CopyAsSlice

func (aux *AuxOID) CopyAsSlice() []int

CopyAsSlice returns a copy of the inter-representation as a slice

func (*AuxOID) Equal

func (aux *AuxOID) Equal(other *AuxOID) bool

Equal tests (deep) equality of two AuxOIDs

func (*AuxOID) MarshalJSON

func (aux *AuxOID) MarshalJSON() ([]byte, error)

MarshalJSON implements the json.Marshaler interface

func (*AuxOID) UnmarshalJSON

func (aux *AuxOID) UnmarshalJSON(b []byte) error

UnmarshalJSON implements the json.Unmarshaler interface

type CertificateList

type CertificateList struct {
	TBSCertList        TBSCertificateList
	SignatureAlgorithm AlgorithmIdentifier
	SignatureValue     asn1.BitString
}

CertificateList represents the ASN.1 structure of the same name. See RFC 5280, section 5.1. Use Certificate.CheckCRLSignature to verify the signature.

func (*CertificateList) HasExpired

func (certList *CertificateList) HasExpired(now time.Time) bool

HasExpired reports whether now is past the expiry time of certList.

type EDIPartyName

type EDIPartyName struct {
	NameAssigner string `asn1:"tag:0,optional,explicit" json:"name_assigner,omitempty"`
	PartyName    string `asn1:"tag:1,explicit" json:"party_name"`
}

EDIPartyName represents the ASN.1 structure of the same name. See RFC 5280, section 4.2.1.6.

type Extension

type Extension struct {
	Id       asn1.ObjectIdentifier
	Critical bool `asn1:"optional"`
	Value    []byte
}

Extension represents the ASN.1 structure of the same name. See RFC 5280, section 4.2.

func (*Extension) MarshalJSON

func (ext *Extension) MarshalJSON() ([]byte, error)

MarshalJSON implements the json.Marshaler interface.

func (*Extension) UnmarshalJSON

func (ext *Extension) UnmarshalJSON(b []byte) (err error)

UnmarshalJSON implements the json.Unmarshaler interface.

type Name

type Name struct {
	Country, Organization, OrganizationalUnit  []string
	Locality, Province                         []string
	StreetAddress, PostalCode, DomainComponent []string
	EmailAddress                               []string
	SerialNumber, CommonName                   string
	GivenName, Surname                         []string
	// EV Components
	JurisdictionLocality, JurisdictionProvince, JurisdictionCountry []string

	Names      []AttributeTypeAndValue
	ExtraNames []AttributeTypeAndValue

	// OriginalRDNS is saved if the name is populated using FillFromRDNSequence.
	// Additionally, if OriginalRDNS is non-nil, the String and ToRDNSequence
	// methods will simply use this.
	OriginalRDNS RDNSequence
}

Name represents an X.509 distinguished name. This only includes the common elements of a DN. Additional elements in the name are ignored.

func (*Name) FillFromRDNSequence

func (n *Name) FillFromRDNSequence(rdns *RDNSequence)

FillFromRDNSequence populates n based on the AttributeTypeAndValueSETs in the RDNSequence. It save the sequence as OriginalRDNS.

func (*Name) MarshalJSON

func (n *Name) MarshalJSON() ([]byte, error)

MarshalJSON implements the json.Marshaler interface.

func (*Name) String

func (n *Name) String() string

String returns a canonical representation of a DistinguishedName

func (Name) ToRDNSequence

func (n Name) ToRDNSequence() (ret RDNSequence)

ToRDNSequence returns OriginalRDNS is populated. Otherwise, it builds an RDNSequence in canonical order.

func (*Name) UnmarshalJSON

func (n *Name) UnmarshalJSON(b []byte) error

UnmarshalJSON implements the json.Unmarshaler interface.

type OIDName

type OIDName struct {
	ShortName string `json:"short_name"`
	LongName  string `json:"long_name"`
}

OIDName stores the short and long version of the name of an IANA-assigned OID

type OtherName

type OtherName struct {
	TypeID asn1.ObjectIdentifier
	Value  asn1.RawValue `asn1:"explicit"`
}

OtherName represents the ASN.1 structure of the same name. See RFC 5280, section 4.2.1.6.

func (*OtherName) MarshalJSON

func (o *OtherName) MarshalJSON() ([]byte, error)

MarshalJSON implements the json.Marshaler interface.

func (*OtherName) UnmarshalJSON

func (o *OtherName) UnmarshalJSON(b []byte) (err error)

UnmarshalJSON implements the json.Unmarshaler interface.

type RDNSequence

type RDNSequence []RelativeDistinguishedNameSET

func (RDNSequence) String

func (seq RDNSequence) String() string

String returns an RDNSequence as comma seperated list of AttributeTypeAndValues in canonical form.

type RelativeDistinguishedNameSET

type RelativeDistinguishedNameSET []AttributeTypeAndValue

type RevokedCertificate

type RevokedCertificate struct {
	SerialNumber   *big.Int
	RevocationTime time.Time
	Extensions     []Extension `asn1:"optional"`
}

RevokedCertificate represents the ASN.1 structure of the same name. See RFC 5280, section 5.1.

type TBSCertificateList

type TBSCertificateList struct {
	Raw                 asn1.RawContent
	Version             int `asn1:"optional,default:0"`
	Signature           AlgorithmIdentifier
	Issuer              RDNSequence
	ThisUpdate          time.Time
	NextUpdate          time.Time            `asn1:"optional"`
	RevokedCertificates []RevokedCertificate `asn1:"optional"`
	Extensions          []Extension          `asn1:"tag:0,optional,explicit"`
}

TBSCertificateList represents the ASN.1 structure of the same name. See RFC 5280, section 5.1.