microsoft

Documentation

Index

• type CertStoreCertificateGroup
• type DisallowedCerts
  • func Parse(byteData []byte) (*DisallowedCerts, error)
• type EndElementMarkerEntry
• type Entry
  • func Check(disallowed *DisallowedCerts, cert *x509.Certificate) *Entry
• type IssuerList
• type SerializedCertificateEntry
• type SerializedPropertyEntry
• type VBASigSerializedCertStore

Types

type CertStoreCertificateGroup

type CertStoreCertificateGroup struct {
	// contains filtered or unexported fields
}

CertStoreCertificateGroup - Specifies a grouping of elements in a serialized digital certificate store that consists of zero or more properties of a certificate, and the serialized certificate itself.

type DisallowedCerts

type DisallowedCerts struct {
	IssuerLists map[string]*IssuerList
}

DisallowedCerts - data structure for storing certificates revoked by Microsoft's intermediate revocation mechanism, disallowedcert.sst

func Parse

func Parse(byteData []byte) (*DisallowedCerts, error)

Parse raw disallowedcert.sst and return an instance of DisallowedCerts, a struct for easy checking of revocation data for certs

type EndElementMarkerEntry

type EndElementMarkerEntry struct {
	ID     uint32 // MUST be 0x00000000
	Marker uint64 // MUST be 0x0000000000000000
}

EndElementMarkerEntry - Specifies a special entry in a serialized digital certificate store that marks the end of the store.

type Entry

type Entry struct {
	SerialNumber *big.Int
}

Entry - Revocation Data for a single Certificate

func Check

func Check(disallowed *DisallowedCerts, cert *x509.Certificate) *Entry

Check - Given a parsed DisallowedCerts instance created by the Parse Func, check to see if a provided certificate has been revoked by this list

type IssuerList

type IssuerList struct {
	Issuer  pkix.Name
	Entries []*Entry
}

IssuerList - List of revoked cert entries given issuer

type SerializedCertificateEntry

type SerializedCertificateEntry struct {
	ID           uint32 //MUST be 0x00000020
	EncodingType uint32 // MUST be the value 0x00000001, which specifies ASN.1 encoding
	Length       uint32 // specifies the length of the certificate field
	Certificate  []byte
}

SerializedCertificateEntry - Specifies an entry in a serialized digital certificate store that contains data for a property associated with a certificate in the store.

type SerializedPropertyEntry

type SerializedPropertyEntry struct {
	ID           uint32 // MUST be less than or equal to 0x0000FFFF and MUST NOT be the value 0x00000000 or 0x00000020
	EncodingType uint32 // MUST be the value 0x00000001, which specifies ASN.1 encoding
	Length       uint32 // specifies the length of the value field
	Value        []byte
}

SerializedPropertyEntry - Specifies an entry in a serialized digital certificate store that contains data for a property associated with a certificate in the store.

type VBASigSerializedCertStore

type VBASigSerializedCertStore struct {
	Version   uint32  // must be 0x00000000
	Magic     [4]byte // must be CERT in ascii
	CertGroup CertStoreCertificateGroup
	// contains filtered or unexported fields
}

VBASigSerializedCertStore - The serialized digital certificate store specifies structures for storing a digital certificate store containing a single digital certificate and, optionally, a list of properties associated with the certificate.