mtls

Apr 11, 2023

Changes in this version

+ func DecodeCrt(rawcrt []byte) (*x509.Certificate, error)

+ func DecodeCrtKey(rawcrt []byte, rawkey []byte) (*x509.Certificate, crypto.PrivateKey, error)

+ func DecodeKey(rawkey []byte) (crypto.PrivateKey, error)

+ func EncodeCrt(crts ...*x509.Certificate) ([]byte, error)

+ func EncodeCsr(csr *x509.Certificate) ([]byte, error)

+ func EncodeKey(privkey crypto.PrivateKey) ([]byte, error)

+ func NewCA(opts ...CertificateOption) ([]byte, crypto.PrivateKey, error)

+ func NewCertificateRequest(opts ...CertificateOption) ([]byte, crypto.PrivateKey, error)

+ func NewIntermediate(cacrt *x509.Certificate, cakey crypto.PrivateKey, opts ...CertificateOption) ([]byte, crypto.PrivateKey, error)

+ func NewServerConfig(src *tls.Config) *tls.Config

+ func SignCSR(rawcsr []byte, cacrt *x509.Certificate, cakey crypto.PrivateKey, ...) ([]byte, error)

+ type CertificateOption func(*CertificateOptions)

+ func CertificateCommonName(s string) CertificateOption

+ func CertificateExtKeyUsage(x ...x509.ExtKeyUsage) CertificateOption

+ func CertificateIsCA(b bool) CertificateOption

+ func CertificateIssuingCertificateURL(s ...string) CertificateOption

+ func CertificateKeyUsage(u x509.KeyUsage) CertificateOption

+ func CertificateNotAfter(t time.Time) CertificateOption

+ func CertificateNotBefore(t time.Time) CertificateOption

+ func CertificateOCSPServer(s ...string) CertificateOption

+ func CertificateOrganization(s ...string) CertificateOption

+ func CertificateOrganizationalUnit(s ...string) CertificateOption

+ func CertificatePublicKeyAlgorithm(alg x509.PublicKeyAlgorithm) CertificateOption

+ func CertificateSerialNumber(n *big.Int) CertificateOption

+ func CertificateSignatureAlgorithm(alg x509.SignatureAlgorithm) CertificateOption

+ type CertificateOptions struct

+ CommonName string

+ ExtKeyUsage []x509.ExtKeyUsage

+ IsCA bool

+ IssuingCertificateURL []string

+ KeyUsage x509.KeyUsage

+ NotAfter time.Time

+ NotBefore time.Time

+ OCSPServer []string

+ Organization []string

+ OrganizationalUnit []string

+ PublicKeyAlgorithm x509.PublicKeyAlgorithm

+ SerialNumber *big.Int

+ SignatureAlgorithm x509.SignatureAlgorithm

+ func NewCertificateOptions(opts ...CertificateOption) CertificateOptions

+ type ServerOption func(*ServerOptions)

+ type ServerOptions struct

+ ClientCAs []string

+ RootCAs []string

+ ServerName string