x509

Aug 14, 2024

Changes in this version

type OID

+ func ParseOID(oid string) (OID, error)

+ func (o *OID) UnmarshalBinary(b []byte) error

+ func (o *OID) UnmarshalText(text []byte) error

+ func (o OID) MarshalBinary() ([]byte, error)

+ func (o OID) MarshalText() ([]byte, error)

Feb 26, 2024

Changes in this version

type CertPool

+ func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error)

type Certificate

+ Policies []OID

+ type OID struct

+ func OIDFromInts(oid []uint64) (OID, error)

+ func (oid OID) Equal(other OID) bool

+ func (oid OID) EqualASN1OID(other asn1.ObjectIdentifier) bool

+ func (oid OID) String() string

Sep 26, 2023

Changes in this version

type RevocationList

+ RevokedCertificateEntries []RevocationListEntry

+ type RevocationListEntry struct

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ Raw []byte

+ ReasonCode int

+ RevocationTime time.Time

+ SerialNumber *big.Int

Sep 26, 2023

Changes in this version

+ func SetFallbackRoots(roots *CertPool)

Sep 26, 2023

Changes in this version

type CertPool

+ func (s *CertPool) Clone() *CertPool

+ func (s *CertPool) Equal(other *CertPool) bool

type RevocationList

+ AuthorityKeyId []byte

+ Extensions []pkix.Extension

+ Issuer pkix.Name

+ Raw []byte

+ RawIssuer []byte

+ RawTBSRevocationList []byte

+ Signature []byte

+ func ParseRevocationList(der []byte) (*RevocationList, error)

+ func (rl *RevocationList) CheckSignatureFrom(parent *Certificate) error

Sep 26, 2023

Changes in this version

type SystemRootsError

+ func (se SystemRootsError) Unwrap() error

Sep 26, 2023

Changes in this version

+ func CreateRevocationList(rand io.Reader, template *RevocationList, issuer *Certificate, ...) ([]byte, error)

+ type RevocationList struct

+ ExtraExtensions []pkix.Extension

+ NextUpdate time.Time

+ Number *big.Int

+ RevokedCertificates []pkix.RevokedCertificate

+ SignatureAlgorithm SignatureAlgorithm

+ ThisUpdate time.Time

Sep 26, 2023

Changes in this version

type PublicKeyAlgorithm

+ const Ed25519

type SignatureAlgorithm

+ const PureEd25519

Sep 26, 2023

Changes in this version

+ func MarshalPKCS1PublicKey(key *rsa.PublicKey) []byte

+ func MarshalPKCS8PrivateKey(key interface{}) ([]byte, error)

+ func ParsePKCS1PublicKey(der []byte) (*rsa.PublicKey, error)

type Certificate

+ ExcludedEmailAddresses []string

+ ExcludedIPRanges []*net.IPNet

+ ExcludedURIDomains []string

+ PermittedEmailAddresses []string

+ PermittedIPRanges []*net.IPNet

+ PermittedURIDomains []string

+ URIs []*url.URL

type CertificateInvalidError

+ Detail string

type CertificateRequest

+ URIs []*url.URL

type ExtKeyUsage

+ const ExtKeyUsageMicrosoftCommercialCodeSigning

+ const ExtKeyUsageMicrosoftKernelCodeSigning

type InvalidReason

+ const CANotAuthorizedForExtKeyUsage

+ const NameConstraintsWithoutSANs

+ const TooManyConstraints

+ const UnconstrainedName

type PublicKeyAlgorithm

+ func (algo PublicKeyAlgorithm) String() string

type VerifyOptions

+ MaxConstraintComparisions int

Sep 26, 2023

Changes in this version

type Certificate

+ ExcludedDNSDomains []string

Sep 26, 2023

Changes in this version

type InvalidReason

+ const NameMismatch

type SignatureAlgorithm

+ const SHA256WithRSAPSS

+ const SHA384WithRSAPSS

+ const SHA512WithRSAPSS

type UnknownAuthorityError

+ Cert *Certificate

Sep 26, 2023

Changes in this version

type CertPool

+ func SystemCertPool() (*CertPool, error)

type SystemRootsError

+ Err error

Sep 26, 2023

Changes in this version

+ type InsecureAlgorithmError SignatureAlgorithm

+ func (e InsecureAlgorithmError) Error() string

type SignatureAlgorithm

+ func (algo SignatureAlgorithm) String() string

Sep 26, 2023

Changes in this version

type Certificate

+ UnhandledCriticalExtensions []asn1.ObjectIdentifier

type CertificateRequest

+ func (c *CertificateRequest) CheckSignature() (err error)

Sep 26, 2023

Changes in this version

type Certificate

+ MaxPathLenZero bool

Sep 26, 2023

Changes in this version

+ func CreateCertificateRequest(rand io.Reader, template *CertificateRequest, priv interface{}) (csr []byte, err error)

+ type CertificateRequest struct

+ Attributes []pkix.AttributeTypeAndValueSET

+ DNSNames []string

+ EmailAddresses []string

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ IPAddresses []net.IP

+ PublicKey interface{}

+ PublicKeyAlgorithm PublicKeyAlgorithm

+ Raw []byte

+ RawSubject []byte

+ RawSubjectPublicKeyInfo []byte

+ RawTBSCertificateRequest []byte

+ Signature []byte

+ SignatureAlgorithm SignatureAlgorithm

+ Subject pkix.Name

+ Version int

+ func ParseCertificateRequest(asn1Data []byte) (*CertificateRequest, error)

Sep 26, 2023

Changes in this version

+ func MarshalECPrivateKey(key *ecdsa.PrivateKey) ([]byte, error)

type Certificate

+ CRLDistributionPoints []string

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ IssuingCertificateURL []string

+ OCSPServer []string

Sep 26, 2023

Changes in this version

+ var IncorrectPasswordError = errors.New("x509: decryption password incorrect")

+ func DecryptPEMBlock(b *pem.Block, password []byte) ([]byte, error)

+ func EncryptPEMBlock(rand io.Reader, blockType string, data, password []byte, alg PEMCipher) (*pem.Block, error)

+ func IsEncryptedPEMBlock(b *pem.Block) bool

+ func ParseECPrivateKey(der []byte) (key *ecdsa.PrivateKey, err error)

type Certificate

+ IPAddresses []net.IP

type ExtKeyUsage

+ const ExtKeyUsageIPSECEndSystem

+ const ExtKeyUsageIPSECTunnel

+ const ExtKeyUsageIPSECUser

+ const ExtKeyUsageMicrosoftServerGatedCrypto

+ const ExtKeyUsageNetscapeServerGatedCrypto

type InvalidReason

+ const IncompatibleUsage

+ type PEMCipher int

+ const PEMCipher3DES

+ const PEMCipherAES128

+ const PEMCipherAES192

+ const PEMCipherAES256

+ const PEMCipherDES

type PublicKeyAlgorithm

+ const ECDSA

type SignatureAlgorithm

+ const ECDSAWithSHA1

+ const ECDSAWithSHA256

+ const ECDSAWithSHA384

+ const ECDSAWithSHA512

+ type SystemRootsError struct

+ func (e SystemRootsError) Error() string

type VerifyOptions

+ KeyUsages []ExtKeyUsage

Sep 26, 2023

Changes in this version

+ var ErrUnsupportedAlgorithm = errors.New("crypto/x509: cannot verify signature: algorithm unimplemented")

+ func CreateCertificate(rand io.Reader, template, parent *Certificate, pub interface{}, ...) (cert []byte, err error)

+ func MarshalPKCS1PrivateKey(key *rsa.PrivateKey) []byte

+ func MarshalPKIXPublicKey(pub interface{}) ([]byte, error)

+ func ParseCRL(crlBytes []byte) (certList *pkix.CertificateList, err error)

+ func ParseDERCRL(derBytes []byte) (certList *pkix.CertificateList, err error)

+ func ParsePKCS1PrivateKey(der []byte) (key *rsa.PrivateKey, err error)

+ func ParsePKCS8PrivateKey(der []byte) (key interface{}, err error)

+ func ParsePKIXPublicKey(derBytes []byte) (pub interface{}, err error)

+ type CertPool struct

+ func NewCertPool() *CertPool

+ func (s *CertPool) AddCert(cert *Certificate)

+ func (s *CertPool) AppendCertsFromPEM(pemCerts []byte) (ok bool)

+ func (s *CertPool) Subjects() (res [][]byte)

+ type Certificate struct

+ AuthorityKeyId []byte

+ BasicConstraintsValid bool

+ DNSNames []string

+ EmailAddresses []string

+ ExtKeyUsage []ExtKeyUsage

+ IsCA bool

+ Issuer pkix.Name

+ KeyUsage KeyUsage

+ MaxPathLen int

+ NotAfter time.Time

+ NotBefore time.Time

+ PermittedDNSDomains []string

+ PermittedDNSDomainsCritical bool

+ PolicyIdentifiers []asn1.ObjectIdentifier

+ PublicKey interface{}

+ PublicKeyAlgorithm PublicKeyAlgorithm

+ Raw []byte

+ RawIssuer []byte

+ RawSubject []byte

+ RawSubjectPublicKeyInfo []byte

+ RawTBSCertificate []byte

+ SerialNumber *big.Int

+ Signature []byte

+ SignatureAlgorithm SignatureAlgorithm

+ Subject pkix.Name

+ SubjectKeyId []byte

+ UnknownExtKeyUsage []asn1.ObjectIdentifier

+ Version int

+ func ParseCertificate(asn1Data []byte) (*Certificate, error)

+ func ParseCertificates(asn1Data []byte) ([]*Certificate, error)

+ func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) (err error)

+ func (c *Certificate) CheckSignature(algo SignatureAlgorithm, signed, signature []byte) (err error)

+ func (c *Certificate) CheckSignatureFrom(parent *Certificate) (err error)

+ func (c *Certificate) CreateCRL(rand io.Reader, priv interface{}, revokedCerts []pkix.RevokedCertificate, ...) (crlBytes []byte, err error)

+ func (c *Certificate) Equal(other *Certificate) bool

+ func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error)

+ func (c *Certificate) VerifyHostname(h string) error

+ type CertificateInvalidError struct

+ Cert *Certificate

+ Reason InvalidReason

+ func (e CertificateInvalidError) Error() string

+ type ConstraintViolationError struct

+ func (ConstraintViolationError) Error() string

+ type ExtKeyUsage int

+ const ExtKeyUsageAny

+ const ExtKeyUsageClientAuth

+ const ExtKeyUsageCodeSigning

+ const ExtKeyUsageEmailProtection

+ const ExtKeyUsageOCSPSigning

+ const ExtKeyUsageServerAuth

+ const ExtKeyUsageTimeStamping

+ type HostnameError struct

+ Certificate *Certificate

+ Host string

+ func (h HostnameError) Error() string

+ type InvalidReason int

+ const CANotAuthorizedForThisName

+ const Expired

+ const NotAuthorizedToSign

+ const TooManyIntermediates

+ type KeyUsage int

+ const KeyUsageCRLSign

+ const KeyUsageCertSign

+ const KeyUsageContentCommitment

+ const KeyUsageDataEncipherment

+ const KeyUsageDecipherOnly

+ const KeyUsageDigitalSignature

+ const KeyUsageEncipherOnly

+ const KeyUsageKeyAgreement

+ const KeyUsageKeyEncipherment

+ type PublicKeyAlgorithm int

+ const DSA

+ const RSA

+ const UnknownPublicKeyAlgorithm

+ type SignatureAlgorithm int

+ const DSAWithSHA1

+ const DSAWithSHA256

+ const MD2WithRSA

+ const MD5WithRSA

+ const SHA1WithRSA

+ const SHA256WithRSA

+ const SHA384WithRSA

+ const SHA512WithRSA

+ const UnknownSignatureAlgorithm

+ type UnhandledCriticalExtension struct

+ func (h UnhandledCriticalExtension) Error() string

+ type UnknownAuthorityError struct

+ func (e UnknownAuthorityError) Error() string

+ type VerifyOptions struct

+ CurrentTime time.Time

+ DNSName string

+ Intermediates *CertPool

+ Roots *CertPool