matcher

Documentation

Index

• func CreateMatcherFromFlags(MatchSubjectRegex string, CNset map[string]bool, FuzzySubjects []string) (scanner.Matcher, error)
• type MatchSubjectRegexUnkCA
  • func (m MatchSubjectRegexUnkCA) CertificateMatches(c *x509.Certificate) bool
  • func (m MatchSubjectRegexUnkCA) PrecertificateMatches(p *ct.Precertificate) bool

Functions

func CreateMatcherFromFlags

func CreateMatcherFromFlags(MatchSubjectRegex string, CNset map[string]bool, FuzzySubjects []string) (scanner.Matcher, error)

Types

type MatchSubjectRegexUnkCA

type MatchSubjectRegexUnkCA struct {
	CertificateSubjectRegex    *regexp.Regexp
	PrecertificateSubjectRegex *regexp.Regexp
	FuzzySubject               []string
	CAWhitelist                map[string]bool
}

func (MatchSubjectRegexUnkCA) CertificateMatches

func (m MatchSubjectRegexUnkCA) CertificateMatches(c *x509.Certificate) bool

Returns true if either CN or any SAN of |c| matches |CertificateSubjectRegex| and Issuer not in CA whitelist.

func (MatchSubjectRegexUnkCA) PrecertificateMatches

func (m MatchSubjectRegexUnkCA) PrecertificateMatches(p *ct.Precertificate) bool

Returns true if either CN or any SAN of |p| matches |PrecertificatesubjectRegex| and Issuer is not in CA whitelist.