x509

Documentation

Index

• Variables
• func VerifyCertChain(certs []*x509.Certificate, signer crypto.Signer) error

Variables

var (
	// EKUOID is the Extended Key Usage OID, per RFC 5280
	EKUOID             = asn1.ObjectIdentifier{2, 5, 29, 37}
	EKUTimestampingOID = asn1.ObjectIdentifier{1, 3, 6, 1, 5, 5, 7, 3, 8}
)

Functions

func VerifyCertChain

func VerifyCertChain(certs []*x509.Certificate, signer crypto.Signer) error

VerifyCertChain verifies that the certificate chain is valid for issuing timestamping certificates. The chain should start with a leaf certificate, followed by any number of intermediates, and end with the root certificate.