ocsp

May 23, 2024

Changes in this version

type FailOpenMode

+ func FailOpenModeString(s string) (FailOpenMode, error)

+ func FailOpenModeValues() []FailOpenMode

+ func (i FailOpenMode) IsAFailOpenMode() bool

+ func (i FailOpenMode) String() string

Apr 11, 2024

Changes in this version

+ func IsOcspVerificationError(err error) bool

+ type ErrOcspIssuerVerification struct

+ Err error

+ func (e *ErrOcspIssuerVerification) Error() string

type VerifyConfig

+ OcspMaxRetries int

+ OcspThisUpdateMaxAge time.Duration

Dec 21, 2022

Changes in this version

+ type Client struct

+ func New(logFactory func() hclog.Logger, cacheSize int) *Client

+ func (c *Client) ClearCache()

+ func (c *Client) GetAllRevocationStatus(ctx context.Context, verifiedChains []*x509.Certificate, conf *VerifyConfig) ([]*ocspStatus, error)

+ func (c *Client) GetRevocationStatus(ctx context.Context, subject, issuer *x509.Certificate, conf *VerifyConfig) (*ocspStatus, error)

+ func (c *Client) Logger() hclog.Logger

+ func (c *Client) NewTransport(conf *VerifyConfig) *http.Transport

+ func (c *Client) VerifyLeafCertificate(ctx context.Context, subject, issuer *x509.Certificate, conf *VerifyConfig) error

+ func (c *Client) VerifyPeerCertificate(ctx context.Context, verifiedChains [][]*x509.Certificate, conf *VerifyConfig) error

+ type FailOpenMode uint32

+ const FailOpenFalse

+ const FailOpenTrue

+ type VerifyConfig struct

+ ExtraCas []*x509.Certificate

+ OcspEnabled bool

+ OcspFailureMode FailOpenMode

+ OcspServersOverride []string

+ QueryAllServers bool