csr

Documentation

Index

• func VerifyCSR(csr *x509.CertificateRequest, maxNames int, keyPolicy *goodkey.KeyPolicy, ...) error

Functions

func VerifyCSR

func VerifyCSR(csr *x509.CertificateRequest, maxNames int, keyPolicy *goodkey.KeyPolicy, pa core.PolicyAuthority, forceCNFromSAN bool, regID int64) error

VerifyCSR checks the validity of a x509.CertificateRequest. Before doing checks it normalizes the CSR which lowers the case of DNS names and subject CN, and if forceCNFromSAN is true it will hoist a DNS name into the CN if it is empty.