csr

Documentation

Index

• func NamesFromCSR(csr *x509.CertificateRequest) names
• func VerifyCSR(ctx context.Context, csr *x509.CertificateRequest, maxNames int, ...) error

Functions

func NamesFromCSR

func NamesFromCSR(csr *x509.CertificateRequest) names

NamesFromCSR deduplicates and lower-cases the Subject Common Name and Subject Alternative Names from the CSR. If a CN was provided, it will be used if it is short enough, otherwise there will be no CN. If no CN was provided, the CN will be the first SAN that is short enough, which is done only for backwards compatibility with prior Let's Encrypt behaviour. The resulting SANs will always include the original CN, if any.

func VerifyCSR

func VerifyCSR(ctx context.Context, csr *x509.CertificateRequest, maxNames int, keyPolicy *goodkey.KeyPolicy, pa core.PolicyAuthority) error

VerifyCSR checks the validity of a x509.CertificateRequest. It uses NamesFromCSR to normalize the DNS names before checking whether we'll issue for them.