pkcs7

Documentation

Index

• Variables
• func ParseAlgorithmIdentifier(der *cryptobyte.String) (*pkix.AlgorithmIdentifier, error)
• func ParseContentInfo(der *cryptobyte.String) (oid encasn1.ObjectIdentifier, content cryptobyte.String, err error)
• func SignPKCS7(signer crypto.Signer, cert *x509.Certificate, oid encasn1.ObjectIdentifier, ...) ([]byte, error)
• type Attributes
  • func (a *Attributes) Marshal() []byte
• type PKCS7
  • func ParsePKCS7(b []byte) (*PKCS7, error)
  • func (p *PKCS7) HasCertificate(cert *x509.Certificate) bool
  • func (p *PKCS7) Verify(cert *x509.Certificate) (bool, error)

Variables

var (
	OIDData                   = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 7, 1}
	OIDSignedData             = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 7, 2}
	OIDDigestAlgorithmSHA256  = encasn1.ObjectIdentifier{2, 16, 840, 1, 101, 3, 4, 2, 1}
	OIDEncryptionAlgorithmRSA = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 1, 1}
	OIDAttributeContentType   = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 9, 3}
	OIDAttributeMessageDigest = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 9, 4}
	OIDAttributeSigningTime   = encasn1.ObjectIdentifier{1, 2, 840, 113549, 1, 9, 5}
)

OID data we need

var (
	ErrNoCertificate = errors.New("no valid certificates")
)

Functions

func ParseAlgorithmIdentifier

func ParseAlgorithmIdentifier(der *cryptobyte.String) (*pkix.AlgorithmIdentifier, error)

Parse cryptobyte string to pkix.AlgorithmIdentifier

func ParseContentInfo

func ParseContentInfo(der *cryptobyte.String) (oid encasn1.ObjectIdentifier, content cryptobyte.String, err error)

func SignPKCS7

func SignPKCS7(signer crypto.Signer, cert *x509.Certificate, oid encasn1.ObjectIdentifier, content []byte) ([]byte, error)

Partially implements RFC2315

Types

type Attributes

type Attributes struct {
	ContentType   encasn1.ObjectIdentifier
	MessageDigest []byte
	SigningTime   time.Time
	Other         []*unparsedAttribute
}

func (*Attributes) Marshal

func (a *Attributes) Marshal() []byte

type PKCS7

type PKCS7 struct {
	OID                 encasn1.ObjectIdentifier
	SignerInfo          []*signerinfo
	ContentInfo         []byte
	Certs               []*x509.Certificate
	AlgorithmIdentifier *pkix.AlgorithmIdentifier
}

func ParsePKCS7

func ParsePKCS7(b []byte) (*PKCS7, error)

func (*PKCS7) HasCertificate

func (p *PKCS7) HasCertificate(cert *x509.Certificate) bool

func (*PKCS7) Verify

func (p *PKCS7) Verify(cert *x509.Certificate) (bool, error)