core

Documentation

Index

• type CRLLocations
• type CertificateChain
  • func (c *CertificateChain) AddCertificateChainEntry(entry *CertificateChainEntry)
• type CertificateChainEntry
  • func FindCertificateIssuerCandidates(issuer *pkix.RDNSequence, extensions *[]pkix.Extension, ...) ([]*CertificateChainEntry, error)
• type CertificateChains
  • func NewCertificateChains(verifiedChains [][]*x509.Certificate, trustedSignerCerts []*x509.Certificate) *CertificateChains
  • func NewCertificateChainsFromEntry(chainEntry *CertificateChainEntry) *CertificateChains
  • func (c *CertificateChains) AddCertificateChain(chain CertificateChain)
• type RevocationStatus

Types

type CRLLocations

type CRLLocations struct {
	CRLDistributionPoints []string
	CRLUrl                string
	CRLFile               string
}

type CertificateChain

type CertificateChain struct {
	CertificateChainEntryList []CertificateChainEntry
}

func (*CertificateChain) AddCertificateChainEntry

func (c *CertificateChain) AddCertificateChainEntry(entry *CertificateChainEntry)

type CertificateChainEntry

type CertificateChainEntry struct {
	RawCertificate []byte
	Certificate    *x509.Certificate
}

func FindCertificateIssuerCandidates

func FindCertificateIssuerCandidates(issuer *pkix.RDNSequence, extensions *[]pkix.Extension, algorithmID x509.PublicKeyAlgorithm, chains *CertificateChains) ([]*CertificateChainEntry, error)

Implemenation according to rfc5280 section 5.2.1

type CertificateChains

type CertificateChains struct {
	CertificateChainList []CertificateChain
}

func NewCertificateChains

func NewCertificateChains(verifiedChains [][]*x509.Certificate, trustedSignerCerts []*x509.Certificate) *CertificateChains

func NewCertificateChainsFromEntry

func NewCertificateChainsFromEntry(chainEntry *CertificateChainEntry) *CertificateChains

func (*CertificateChains) AddCertificateChain

func (c *CertificateChains) AddCertificateChain(chain CertificateChain)

type RevocationStatus

type RevocationStatus struct {
	Revoked             bool
	CRLRevokedCertEntry *pkix.RevokedCertificate
	OcspResponse        *ocsp.Response
}