cert

Documentation

Index

• func CertFromPem(data []byte) (*x509.Certificate, error)
• func CertFromPemFile(path string) (*x509.Certificate, error)
• func GUIDFromFile(path string) (efi.GUID, error)
• func KeyFromPem(data []byte) (*rsa.PrivateKey, error)
• func KeyFromPemFile(path string) (*rsa.PrivateKey, error)
• func LoadSignatureDataDir(dirPath string) (*efi.SignatureData, error)
• func LoadSignatureDataDirs(dirPaths ...string) ([]*efi.SignatureData, error)
• func NewEFISignatureDatabase(sigDatam []*efi.SignatureData) efi.SignatureDatabase
• func PemFromCert(cert *x509.Certificate) ([]byte, error)

Functions

func CertFromPem

func CertFromPem(data []byte) (*x509.Certificate, error)

func CertFromPemFile

func CertFromPemFile(path string) (*x509.Certificate, error)

func GUIDFromFile

func GUIDFromFile(path string) (efi.GUID, error)

func KeyFromPem

func KeyFromPem(data []byte) (*rsa.PrivateKey, error)

func KeyFromPemFile

func KeyFromPemFile(path string) (*rsa.PrivateKey, error)

func LoadSignatureDataDir

func LoadSignatureDataDir(dirPath string) (*efi.SignatureData, error)

func LoadSignatureDataDirs

func LoadSignatureDataDirs(dirPaths ...string) ([]*efi.SignatureData, error)

func NewEFISignatureDatabase

func NewEFISignatureDatabase(sigDatam []*efi.SignatureData) efi.SignatureDatabase

NewEFISignatureDatabase - return an efi.SignatureDatabase containing all of the provided SignatureData.

This SignatureDatabase is the same as you would get with:

cert-to-efi-sig-list -g X x.pem
cert-to-efi-sig-list -g Y y.pem
...
cat x.pem y.pem ... > my.esl

SignatureDatabase is just a slice of SignatureList SignatureList has multiple SignatureData in .Signatures

• each of its Signatures must be the same size
• efi.CertX509Guid is the Type that is used for shim db

SignatureData is a single guid + cert

func PemFromCert

func PemFromCert(cert *x509.Certificate) ([]byte, error)