google

Documentation

Index

• func Fetch(url string) ([]byte, string, error)
• func VersionRequestURL() string
• type CRLSet
  • func FetchAndParse() (*CRLSet, error)
  • func Parse(in []byte, version string) (*CRLSet, error)
  • func (crlSet *CRLSet) Check(cert *x509.Certificate, issuerSPKIHash string) *Entry
• type CRLSetHeader
• type CRXHeader
• type Entry
• type IssuerList
• type Provider
  • func NewProvider(requestURL string) Provider
• type RawCRLSetSerial
• type RawEntry
• type ZipReader
  • func (z ZipReader) ReadAt(p []byte, pos int64) (int, error)

Functions

func Fetch

func Fetch(url string) ([]byte, string, error)

Fetch returns reader to be passed to Parse

func VersionRequestURL

func VersionRequestURL() string

VersionRequestURL returns a URL from which the current CRLSet version information can be fetched.

Types

type CRLSet

type CRLSet struct {
	Version      string
	IssuerLists  map[string]*IssuerList
	Sequence     int
	NumParents   int
	BlockedSPKIs []string
}

CRLSet - data structure for storing CRLSet data, used by methods below

func FetchAndParse

func FetchAndParse() (*CRLSet, error)

FetchAndParse - fetch from distribution point, parse to CRLSet struct as defined above

func Parse

func Parse(in []byte, version string) (*CRLSet, error)

Parse - given a reader for a raw byte stream for a CRLSet, parse the file into a usable CRLSet struct instance. DUE TO THE DIFFICULTY OF RETRIEVING A CRLSET, IT IS HIGHLY RECOMMENDED TO JUST USE THE FetchAndParseCRLSet FUNCTION PROVIDED ABOVE

func (*CRLSet) Check

func (crlSet *CRLSet) Check(cert *x509.Certificate, issuerSPKIHash string) *Entry

Check - Given a parsed CRLSet, check if a given cert is present

type CRLSetHeader

type CRLSetHeader struct {
	Sequence     int
	NumParents   int
	BlockedSPKIs []string
}

CRLSetHeader is used to parse the JSON header found in CRLSet files.

type CRXHeader

type CRXHeader struct {
	Magic     [4]byte
	Version   uint32
	HeaderLen uint32
}

CRXHeader reflects the binary header of a CRX file.

type Entry

type Entry struct {
	SerialNumber *big.Int
}

Entry - entry for a single certificate

type IssuerList

type IssuerList struct {
	SPKIHash string // SHA256 of Issuer SPKI
	Entries  []*Entry
}

IssuerList - list of revoked certificate entries for a given issuer

type Provider

type Provider interface {
	FetchAndParse() (*CRLSet, error)
}

Provider specifies CRLSet provider interface

func NewProvider

func NewProvider(requestURL string) Provider

NewProvider returns default Provider

type RawCRLSetSerial

type RawCRLSetSerial struct {
	Len         uint8
	SerialBytes []byte
}

RawCRLSetSerial - structure of certificate serial number in a raw CRLSet entry

type RawEntry

type RawEntry struct {
	SPKIHash   [32]byte // SHA256 of Issuer SPKI
	NumSerials uint32
	Serials    []RawCRLSetSerial
}

RawEntry - structure for a raw CRLSet entry

type ZipReader

type ZipReader []byte

ZipReader is a small wrapper around a []byte which implements ReadAt.

func (ZipReader) ReadAt

func (z ZipReader) ReadAt(p []byte, pos int64) (int, error)

ReadAt - Implementation of ReadAt for ZipReader App