ocspstapling

Documentation

Overview

Package ocspstapling implements OCSP stapling of Signed Certificate Timestamps (SCTs) into OCSP responses in a database. See RFC 6962.

Index

• func StapleSCTList(acc certdb.Accessor, serial, aki string, scts []ct.SignedCertificateTimestamp, ...) error

Functions

func StapleSCTList

func StapleSCTList(acc certdb.Accessor, serial, aki string, scts []ct.SignedCertificateTimestamp,
	responderCert, issuer *x509.Certificate, priv crypto.Signer) error

StapleSCTList inserts a list of Signed Certificate Timestamps into all OCSP responses in a database wrapped by a given certdb.Accessor.

NOTE: This function is patterned after the exported Sign method in https://github.com/cloudflare/cfssl/blob/master/signer/local/local.go