Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

pki

package module

Go to main page

Versions in this module

v0

v0.2.7

Jan 8, 2025

v0.2.6

Dec 19, 2024

v0.2.5

Dec 19, 2023

v0.2.4

Oct 31, 2023

v0.2.3

Aug 8, 2022

v0.2.2

Aug 10, 2020

v0.2.1

Aug 5, 2020

v0.2.0

Aug 5, 2020

Changes in this version

+ const DBVersion

+ var ErrCARevoked = errors.New("issuing CA is revoked")

+ var ErrExpired = errors.New("certificate has expired")

+ var ErrNoConfigBucket = errors.New("db: can't find config bucket")

+ var ErrNotFound = errors.New("no such CN")

+ var ErrTooSmall = errors.New("decrypt: input buffer too small")

+ func CertificateRequestText(csr *x509.CertificateRequest) (string, error)

+ func CertificateText(cert *x509.Certificate) (string, error)

+ type CA struct

+ CARevoked bool

+ Expired bool

+ func New(cfg *Config, dbname string, create bool) (*CA, error)

+ func NewFromJSON(cfg *Config, dbname, jsonStr string) (*CA, error)

+ func NewWithStorage(cfg *Config, db Storage, create bool) (*CA, error)

+ func (ca *CA) CRL(crlValidDays int) ([]byte, error)

+ func (ca *CA) Chain() ([]*CA, error)

+ func (ca *CA) ChainFor(c *Cert) ([]*CA, error)

+ func (ca *CA) Close() error

+ func (ca *CA) ExportJSON(wr io.Writer) error

+ func (ca *CA) Find(cn string) (*Cert, error)

+ func (ca *CA) FindCA(cn string) (*CA, error)

+ func (ca *CA) FindClient(cn string) (*Cert, error)

+ func (ca *CA) FindServer(cn string) (*Cert, error)

+ func (ca *CA) GetAllRevoked() (*pkix.CertificateList, error)

+ func (ca *CA) GetCAs() ([]*CA, error)

+ func (ca *CA) GetClients() ([]*Cert, error)

+ func (ca *CA) GetServers() ([]*Cert, error)

+ func (ca *CA) IsRevokedCA(xca *CA) (bool, error)

+ func (ca *CA) IsValid() bool

+ func (ca *CA) ListRevoked() (map[string]Revoked, error)

+ func (ca *CA) NewClientCert(ci *CertInfo, pw string) (*Cert, error)

+ func (ca *CA) NewIntermediateCA(ci *CertInfo) (*CA, error)

+ func (ca *CA) NewServerCert(ci *CertInfo, pw string) (*Cert, error)

+ func (ca *CA) PEM() []byte

+ func (ca *CA) Rekey(newpw string) error

+ func (ca *CA) RevokeCA(cn string) error

+ func (ca *CA) RevokeClient(cn string) error

+ func (ca *CA) RevokeServer(cn string) error

+ func (ca *CA) SignCert(csr *x509.Certificate) (*x509.Certificate, error)

+ type Cert struct

+ Additional []byte

+ CARevoked bool

+ Expired bool

+ IsCA bool

+ IsServer bool

+ Key *ecdsa.PrivateKey

+ Rawkey []byte

+ func (ck *Cert) PEM() (crt, key []byte)

+ type CertInfo struct

+ Additional []byte

+ DNSNames []string

+ EmailAddresses []string

+ IPAddresses []net.IP

+ Subject pkix.Name

+ Validity time.Duration

+ type Config struct

+ Passwd string

+ Subject pkix.Name

+ Validity time.Duration

+ type Revoked struct

+ When time.Time

+ type Storage interface

+ Close func() error

+ DeleteClientCert func(cn string) error

+ DeleteICA func(cn string) error

+ DeleteServerCert func(cn string) error

+ ExportJSON func() (string, error)

+ FindRevoked func(skid []byte) (time.Time, *Cert, error)

+ GetClientCert func(nm string, pw string) (*Cert, error)

+ GetICA func(nm string) (*Cert, error)

+ GetRootCA func() (*Cert, error)

+ GetSerial func() *big.Int

+ GetServerCert func(nm string, pw string) (*Cert, error)

+ MapClientCerts func(func(*Cert) error) error

+ MapICA func(func(*Cert) error) error

+ MapRevoked func(func(time.Time, *Cert)) error

+ MapServerCerts func(func(*Cert) error) error

+ NewSerial func() (*big.Int, error)

+ Rekey func(newpw string) error

+ StoreClientCert func(c *Cert, pw string) error

+ StoreICA func(c *Cert) error

+ StoreRootCA func(*Cert) error

+ StoreServerCert func(c *Cert, pw string) error