certconstraints

Documentation

Index

• func IsTechnicallyConstrained(cert *x509.Certificate) bool
• func IsTechnicallyConstrainedMozPolicyV2_5(cert *x509.Certificate) bool
• type Constraints
  • func Get(cert *x509.Certificate) (*Constraints, error)

Functions

func IsTechnicallyConstrained

func IsTechnicallyConstrained(cert *x509.Certificate) bool

IsTechnicallyConstrained determines if a given certificate is technically constrained. Slightly modified from https://github.com/jcjones/gx509/blob/master/gx509/technicalconstraints.go

func IsTechnicallyConstrainedMozPolicyV2_5

func IsTechnicallyConstrainedMozPolicyV2_5(cert *x509.Certificate) bool

IsTechnicallyConstrainedMozPolicyV2_5 determines if a given certificate is technically constrained according to the Mozilla Root Store Policy V2.5. https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/

Types

type Constraints

type Constraints struct {
	PermittedDNSDomains []string
	ExcludedDNSDomains  []string
	PermittedIPRanges   []*net.IPNet
	ExcludedIPRanges    []*net.IPNet
}

func Get

func Get(cert *x509.Certificate) (*Constraints, error)

Get returns the Constraints for a given x509 certificate