cert

package

Go to main page

Versions in this module

v0

v0.16.0

Jan 12, 2021

Changes in this version

+ var ErrSANNotFound = errors.New("subject alternative name not found")

+ var ErrWrongPrivateKey = core.NewError("failed to decode PEM block containing private key", false)

+ func CSRFromVendorCA(ca *x509.Certificate, existingQualifier string, qualifierReplacement string, ...) (*x509.CertificateRequest, error)

+ func DomainFromCertificate(certificate *x509.Certificate) (string, error)

+ func PemToSigner(bytes []byte) (signer crypto.Signer, err error)

+ func VendorIDFromCertificate(certificate *x509.Certificate) (core.PartyID, error)

type TrustStore

+ Intermediates func() ([]*x509.Certificate, *x509.CertPool)

+ Roots func() ([]*x509.Certificate, *x509.CertPool)

type Verifier

+ VerifiedChain func(*x509.Certificate, time.Time, []x509.ExtKeyUsage) ([][]*x509.Certificate, error)

v0.15.0

Sep 29, 2020

Changes in this version

+ var ErrInvalidCertificate = core.NewError("failed to decode PEM block containing certificate", false)

+ var OIDNuts = asn1.ObjectIdentifier

+ var OIDNutsDomain = asn12.OIDAppend(OIDNuts, 3)

+ var OIDNutsVendor = asn12.OIDAppend(OIDNuts, 4)

+ var OIDSubjectAltName = asn1.ObjectIdentifier

+ func CertificateToPEM(certificate *x509.Certificate) string

+ func CopySANs(certificate *x509.Certificate) []pkix.Extension

+ func PemToX509(rawData []byte) (*x509.Certificate, error)

+ func ValidateCertificate(certificate *x509.Certificate, validators ...CertificateValidator) error

+ func VendorCertificateRequest(vendorID string, vendorName string, qualifier string, domain string) (*x509.CertificateRequest, error)

+ type CertificateValidator func(*x509.Certificate) error

+ func IsCA() CertificateValidator

+ func MeantForSigning() CertificateValidator

+ func ValidAt(moment time.Time) CertificateValidator

+ func ValidBetween(startInclusive time.Time, endInclusive time.Time) CertificateValidator

type TrustStore

+ GetCertificates func([][]*x509.Certificate, time.Time, bool) [][]*x509.Certificate

+ GetRoots func(time.Time) []*x509.Certificate

v0.14.0

Jun 22, 2020

Changes in this version

+ var ErrRsaPubKeyConversion = core.NewError("Unable to convert public key to RSA public key", false)

+ var ErrWrongPublicKey = core.NewError("failed to decode PEM block containing public key, key is of the wrong type", ...)

+ func CertificateToJWK(cert *x509.Certificate) (jwk.Key, error)

+ func GetX509ChainFromHeaders(headers jwkHeaderReader) ([]*x509.Certificate, error)

+ func JwkToMap(key jwk.Key) (map[string]interface{}, error)

+ func MapToJwk(jwkAsMap map[string]interface{}) (jwk.Key, error)

+ func MapToX509CertChain(jwkAsMap map[string]interface{}) ([]*x509.Certificate, error)

+ func MapsToJwkSet(maps []map[string]interface{}) (*jwk.Set, error)

+ func MarshalX509CertChain(chain []*x509.Certificate) []string

+ func PemToJwk(pub []byte) (jwk.Key, error)

+ func PemToPublicKey(pub []byte) (*rsa.PublicKey, error)

+ func PublicKeyToPem(pub *rsa.PublicKey) (string, error)

+ func SerialNumber() (*big.Int, error)

+ func ValidateJWK(maps ...interface{}) error

+ type TrustStore interface

+ AddCertificate func(certificate *x509.Certificate) error

+ Pool func() *x509.CertPool

+ func NewTrustStore(file string) (TrustStore, error)

+ type Verifier interface

+ Verify func(*x509.Certificate, time.Time) error

v0.13.2

Apr 2, 2020

v0.13.1

Apr 2, 2020

v0.13.0

Mar 30, 2020

Changes in this version

+ func GetActiveCertificates(jwks []interface{}, instant time.Time) []*x509.Certificate

+ func GetCertificate(jwkAsMap interface{}) *x509.Certificate

+ func MarshalNutsDomain(domain string) ([]byte, error)

+ func MarshalOtherSubjectAltName(valueType asn1.ObjectIdentifier, value string) ([]byte, error)

+ func UnmarshalNutsDomain(data []byte) (string, error)

+ func UnmarshalOtherSubjectAltName(valueType asn1.ObjectIdentifier, data []byte) (string, error)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL