truststore

Documentation

Overview

Package truststore reads certificates in a trust store

Index

• Variables
• func ValidateCertificates(certs []*x509.Certificate) error
• type CertificateError
  • func (e CertificateError) Error() string
  • func (e CertificateError) Unwrap() error
• type TrustStoreError
  • func (e TrustStoreError) Error() string
  • func (e TrustStoreError) Unwrap() error
• type Type
• type X509TrustStore
  • func NewX509TrustStore(trustStorefs dir.SysFS) X509TrustStore

Variables

var (
	Types = []Type{
		TypeCA,
		TypeSigningAuthority,
	}
)

Functions

func ValidateCertificates

func ValidateCertificates(certs []*x509.Certificate) error

ValidateCertificates ensures certificates from trust store are CA certificates or self-signed.

Types

type CertificateError

type CertificateError struct {
	Msg        string
	InnerError error
}

CertificateError is used when reading a certificate failed

func (CertificateError) Error

func (e CertificateError) Error() string

func (CertificateError) Unwrap

func (e CertificateError) Unwrap() error

type TrustStoreError

type TrustStoreError struct {
	Msg        string
	InnerError error
}

TrustStoreError is used when accessing specified trust store failed

func (TrustStoreError) Error

func (e TrustStoreError) Error() string

func (TrustStoreError) Unwrap

func (e TrustStoreError) Unwrap() error

type Type

type Type string

Type is an enum for trust store types supported such as "ca" and "signingAuthority"

const (
	TypeCA               Type = "ca"
	TypeSigningAuthority Type = "signingAuthority"
)

type X509TrustStore

type X509TrustStore interface {
	// GetCertificates returns certificates under storeType/namedStore
	GetCertificates(ctx context.Context, storeType Type, namedStore string) ([]*x509.Certificate, error)
}

X509TrustStore provide list and get behaviors for the trust store

func NewX509TrustStore

func NewX509TrustStore(trustStorefs dir.SysFS) X509TrustStore

NewX509TrustStore generates a new X509TrustStore