smx509

Mar 6, 2024

Changes in this version

+ func SetFallbackRoots(roots *CertPool)

type CertPool

+ func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error)

Feb 16, 2023

Changes in this version

+ func ParseTypedECPrivateKey(der []byte) (interface{}, error)

Nov 15, 2022

Changes in this version

+ func ParseName(raw cryptobyte.String) (*pkix.RDNSequence, error)

Nov 3, 2022

Changes in this version

+ func MarshalPKCS1PrivateKey(key *rsa.PrivateKey) []byte

+ func MarshalPKCS1PublicKey(key *rsa.PublicKey) []byte

+ func ParsePKCS1PrivateKey(der []byte) (*rsa.PrivateKey, error)

+ func ParsePKCS1PublicKey(der []byte) (*rsa.PublicKey, error)

Apr 15, 2022

Changes in this version

+ var IncorrectPasswordError = errors.New("x509: decryption password incorrect")

+ func DecryptPEMBlock(b *pem.Block, password []byte) ([]byte, error)

+ func EncryptPEMBlock(rand io.Reader, blockType string, data, password []byte, alg PEMCipher) (*pem.Block, error)

+ func IsEncryptedPEMBlock(b *pem.Block) bool

type CertPool

+ func (s *CertPool) Clone() *CertPool

+ func (s *CertPool) Equal(other *CertPool) bool

type Certificate

+ func (c *Certificate) ToX509() *x509.Certificate

type CertificateRequest

+ func (c *CertificateRequest) ToX509() *x509.CertificateRequest

+ type PEMCipher int

+ const PEMCipher3DES

+ const PEMCipherAES128

+ const PEMCipherAES192

+ const PEMCipherAES256

+ const PEMCipherDES

+ const PEMCipherSM4

Jan 21, 2022

Changes in this version

+ const CANotAuthorizedForExtKeyUsage

+ const CANotAuthorizedForThisName

+ const DSA

+ const DSAWithSHA1

+ const DSAWithSHA256

+ const ECDSA

+ const ECDSAWithSHA1

+ const ECDSAWithSHA256

+ const ECDSAWithSHA384

+ const ECDSAWithSHA512

+ const Ed25519

+ const Expired

+ const ExtKeyUsageAny

+ const ExtKeyUsageClientAuth

+ const ExtKeyUsageCodeSigning

+ const ExtKeyUsageEmailProtection

+ const ExtKeyUsageIPSECEndSystem

+ const ExtKeyUsageIPSECTunnel

+ const ExtKeyUsageIPSECUser

+ const ExtKeyUsageMicrosoftCommercialCodeSigning

+ const ExtKeyUsageMicrosoftKernelCodeSigning

+ const ExtKeyUsageMicrosoftServerGatedCrypto

+ const ExtKeyUsageNetscapeServerGatedCrypto

+ const ExtKeyUsageOCSPSigning

+ const ExtKeyUsageServerAuth

+ const ExtKeyUsageTimeStamping

+ const IncompatibleUsage

+ const KeyUsageCRLSign

+ const KeyUsageCertSign

+ const KeyUsageContentCommitment

+ const KeyUsageDataEncipherment

+ const KeyUsageDecipherOnly

+ const KeyUsageDigitalSignature

+ const KeyUsageEncipherOnly

+ const KeyUsageKeyAgreement

+ const KeyUsageKeyEncipherment

+ const MD2WithRSA

+ const MD5WithRSA

+ const NameConstraintsWithoutSANs

+ const NameMismatch

+ const NotAuthorizedToSign

+ const PureEd25519

+ const RSA

+ const SHA1WithRSA

+ const SHA256WithRSA

+ const SHA256WithRSAPSS

+ const SHA384WithRSA

+ const SHA384WithRSAPSS

+ const SHA512WithRSA

+ const SHA512WithRSAPSS

+ const TooManyConstraints

+ const TooManyIntermediates

+ const UnconstrainedName

+ const UnknownPublicKeyAlgorithm

+ const UnknownSignatureAlgorithm

+ type ExtKeyUsage = x509.ExtKeyUsage

+ type KeyUsage = x509.KeyUsage

+ type PublicKeyAlgorithm = x509.PublicKeyAlgorithm

+ type SignatureAlgorithm = x509.SignatureAlgorithm

Dec 3, 2021

Changes in this version

+ func CreateRevocationList(rand io.Reader, template *x509.RevocationList, issuer *Certificate, ...) ([]byte, error)

Jun 29, 2021

Changes in this version

+ const SM2WithSM3

+ func ParseCRL(crlBytes []byte) (*pkix.CertificateList, error)

+ func ParseDERCRL(derBytes []byte) (*pkix.CertificateList, error)

type Certificate

+ func ParseCertificatePEM(data []byte) (*Certificate, error)

type CertificateRequest

+ func ParseCertificateRequestPEM(data []byte) (*CertificateRequest, error)

Feb 25, 2021

Changes in this version

type Certificate

+ func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) error

Feb 16, 2021

Changes in this version

+ func CreateCertificate(rand io.Reader, template, parent *x509.Certificate, pub, priv interface{}) (cert []byte, err error)

+ func MarshalECPrivateKey(key *ecdsa.PrivateKey) ([]byte, error)

+ func MarshalPKCS8PrivateKey(key interface{}) ([]byte, error)

+ func MarshalSM2PrivateKey(key *sm2.PrivateKey) ([]byte, error)

+ func ParseECPrivateKey(der []byte) (*ecdsa.PrivateKey, error)

+ func ParsePKCS8PrivateKey(der []byte) (key interface{}, err error)

+ func ParseSM2PrivateKey(der []byte) (*sm2.PrivateKey, error)

+ type CertPool struct

+ func NewCertPool() *CertPool

+ func SystemCertPool() (*CertPool, error)

+ func (s *CertPool) AddCert(cert *Certificate)

+ func (s *CertPool) AppendCertsFromPEM(pemCerts []byte) (ok bool)

+ func (s *CertPool) Subjects() [][]byte

+ type Certificate struct

+ func ParseCertificate(asn1Data []byte) (*Certificate, error)

+ func ParseCertificates(asn1Data []byte) ([]*Certificate, error)

+ func (c *Certificate) CheckSignature(algo x509.SignatureAlgorithm, signed, signature []byte) error

+ func (c *Certificate) CheckSignatureFrom(parent *Certificate) error

+ func (c *Certificate) CreateCRL(rand io.Reader, priv interface{}, revokedCerts []pkix.RevokedCertificate, ...) (crlBytes []byte, err error)

+ func (c *Certificate) Equal(other *Certificate) bool

+ func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error)

+ func (c *Certificate) VerifyHostname(h string) error

+ type CertificateInvalidError struct

+ Cert *Certificate

+ Detail string

+ Reason x509.InvalidReason

+ func (e CertificateInvalidError) Error() string

+ type CertificateRequest struct

+ func (c *CertificateRequest) CheckSignature() error

+ type SystemRootsError struct

+ Err error

+ func (se SystemRootsError) Error() string

+ type UnknownAuthorityError struct

+ Cert *Certificate

+ func (e UnknownAuthorityError) Error() string

+ type VerifyOptions struct

+ CurrentTime time.Time

+ DNSName string

+ Intermediates *CertPool

+ KeyUsages []x509.ExtKeyUsage

+ MaxConstraintComparisions int

+ Roots *CertPool

Feb 13, 2021

Changes in this version

+ func CheckSignature(c *x509.CertificateRequest) error

+ func CreateCertificateRequest(rand io.Reader, template *x509.CertificateRequest, priv interface{}) (csr []byte, err error)

+ func MarshalPKIXPublicKey(pub interface{}) ([]byte, error)

+ func ParseCertificateRequest(asn1Data []byte) (*x509.CertificateRequest, error)

+ func ParsePKIXPublicKey(derBytes []byte) (interface{}, error)