pkcs12

README

This is a fork of the from the original PKCS#12 parsing code published in the Azure repository go-pkcs12. This fork adds serializing a x509 certificate and private key as PKCS#12 binary blob (aka .PFX file). Due to the specific nature of this code it was not accepted for inclusion in the official Go crypto repository.

The methods used for decoding PKCS#12 have been moved to the test files to further discourage the use of this library for decoding. Please use the official pkcs12 library for decode support.

Documentation

Overview

Package pkcs12 provides some implementations of PKCS#12.

This implementation is distilled from https://tools.ietf.org/html/rfc7292 and referenced documents. It is intended for decoding P12/PFX-stored certificate+key for use with the crypto/tls package.

Index

• Variables
• func Encode(derBytes []byte, privateKey interface{}, password string) (pfxBytes []byte, err error)
• type EncodeError
  • func (e EncodeError) Error() string
• type NotImplementedError
  • func (e NotImplementedError) Error() string

Variables

var (
	// ErrDecryption represents a failure to decrypt the input.
	ErrDecryption = errors.New("pkcs12: decryption error, incorrect padding")

	// ErrIncorrectPassword is returned when an incorrect password is detected.
	// Usually, P12/PFX data is signed to be able to verify the password.
	ErrIncorrectPassword = errors.New("pkcs12: decryption password incorrect")
)

Functions

func Encode

func Encode(derBytes []byte, privateKey interface{}, password string) (pfxBytes []byte, err error)

Encode converts a certificate and a private key to the PKCS#12 byte stream format.

derBytes is a DER encoded certificate. privateKey is an RSA

Types

type EncodeError

type EncodeError string

func (EncodeError) Error

func (e EncodeError) Error() string

type NotImplementedError

type NotImplementedError string

NotImplementedError indicates that the input is not currently supported.

func (NotImplementedError) Error

func (e NotImplementedError) Error() string