Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

certspotter

package module

Go to main page

Versions in this module

v0

v0.18.0

Nov 13, 2023

v0.17.0

Oct 26, 2023

Changes in this version

type SubjectAltName

+ func ParseSANExtension(sans []SubjectAltName, value []byte) ([]SubjectAltName, error)

v0.16.0

Feb 21, 2023

v0.15.1

Feb 9, 2023

v0.15.0

Feb 9, 2023

v0.14.0

Jun 13, 2022

Changes in this version

+ const UnparsableDNSLabelPlaceholder

+ const Version

+ func GetFullChain(entry *ct.LogEntry) [][]byte

+ func IsPrecert(entry *ct.LogEntry) bool

+ func MarshalRDNSequence(rdns RDNSequence) ([]byte, error)

+ func MatchesWildcard(dnsName string, pattern string) bool

+ func ReadSTHFile(path string) (*ct.SignedTreeHead, error)

+ func VerifyConsistencyProof(proof ct.ConsistencyProof, first *ct.SignedTreeHead, second *ct.SignedTreeHead) bool

+ func VerifyPrecertSCT(sct *ct.SignedCertificateTimestamp, precert ct.PreCert, ...) error

+ func VerifyX509SCT(sct *ct.SignedCertificateTimestamp, cert []byte, verify *ct.SignatureVerifier) error

+ func WriteProofFile(path string, proof ct.ConsistencyProof) error

+ func WriteSTHFile(path string, sth *ct.SignedTreeHead) error

+ type AttributeTypeAndValue struct

+ Type asn1.ObjectIdentifier

+ Value asn1.RawValue

+ type CertInfo struct

+ IsCA *bool

+ IsCAParseError error

+ IsPreCert bool

+ Issuer RDNSequence

+ IssuerParseError error

+ SANs []SubjectAltName

+ SANsParseError error

+ SerialNumber *big.Int

+ SerialNumberParseError error

+ Subject RDNSequence

+ SubjectParseError error

+ TBS *TBSCertificate

+ Validity *CertValidity

+ ValidityParseError error

+ func MakeCertInfoFromLogEntry(entry *ct.LogEntry) (*CertInfo, error)

+ func MakeCertInfoFromRawCert(certBytes []byte) (*CertInfo, error)

+ func MakeCertInfoFromRawTBS(tbsBytes []byte) (*CertInfo, error)

+ func MakeCertInfoFromTBS(tbs *TBSCertificate) *CertInfo

+ func (cert *CertInfo) ParseIdentifiers() (*Identifiers, error)

+ func (info *CertInfo) Environ() []string

+ func (info *CertInfo) NotAfter() *time.Time

+ func (info *CertInfo) NotBefore() *time.Time

+ func (info *CertInfo) PubkeyHash() string

+ func (info *CertInfo) PubkeyHashBytes() []byte

+ type CertValidity struct

+ NotAfter time.Time

+ NotBefore time.Time

+ type Certificate struct

+ Raw asn1.RawContent

+ SignatureAlgorithm asn1.RawValue

+ SignatureValue asn1.RawValue

+ TBSCertificate asn1.RawValue

+ func ParseCertificate(certBytes []byte) (*Certificate, error)

+ func (cert *Certificate) GetRawTBSCertificate() []byte

+ func (cert *Certificate) ParseSignatureAlgorithm() (*pkix.AlgorithmIdentifier, error)

+ func (cert *Certificate) ParseSignatureValue() ([]byte, error)

+ func (cert *Certificate) ParseTBSCertificate() (*TBSCertificate, error)

+ type CollapsedMerkleTree struct

+ func CloneCollapsedMerkleTree(source *CollapsedMerkleTree) *CollapsedMerkleTree

+ func EmptyCollapsedMerkleTree() *CollapsedMerkleTree

+ func NewCollapsedMerkleTree(nodes []ct.MerkleTreeNode, size uint64) (*CollapsedMerkleTree, error)

+ func (tree *CollapsedMerkleTree) Add(hash ct.MerkleTreeNode)

+ func (tree *CollapsedMerkleTree) CalculateRoot() ct.MerkleTreeNode

+ func (tree *CollapsedMerkleTree) GetSize() uint64

+ func (tree *CollapsedMerkleTree) MarshalJSON() ([]byte, error)

+ func (tree *CollapsedMerkleTree) UnmarshalJSON(b []byte) error

+ type EntryInfo struct

+ Bygone bool

+ CertInfo *CertInfo

+ Entry *ct.LogEntry

+ Filename string

+ FullChain [][]byte

+ Identifiers *Identifiers

+ IdentifiersParseError error

+ IsPrecert bool

+ LogUri string

+ ParseError error

+ func (info *EntryInfo) Environ() []string

+ func (info *EntryInfo) Fingerprint() string

+ func (info *EntryInfo) FingerprintBytes() []byte

+ func (info *EntryInfo) HasParseErrors() bool

+ func (info *EntryInfo) InvokeHookScript(command string) error

+ func (info *EntryInfo) Write(out io.Writer)

+ type Extension struct

+ Critical bool

+ Id asn1.ObjectIdentifier

+ Value []byte

+ type Identifiers struct

+ DNSNames []string

+ IPAddrs []net.IP

+ func NewIdentifiers() *Identifiers

+ func (ids *Identifiers) AddCN(value string)

+ func (ids *Identifiers) AddDnsSAN(value []byte)

+ func (ids *Identifiers) AddIPAddress(value net.IP)

+ type PrecertInfo struct

+ AKI []byte

+ Issuer []byte

+ SameIssuer bool

+ func ValidatePrecert(precertBytes []byte, tbsBytes []byte) (*PrecertInfo, error)

+ type ProcessCallback func(*Scanner, *ct.LogEntry)

+ type RDNSequence []RelativeDistinguishedNameSET

+ func CanonicalizeRDNSequence(oldSequence RDNSequence) (RDNSequence, error)

+ func ParseRDNSequence(rdnsBytes []byte) (RDNSequence, error)

+ func (rdns RDNSequence) ParseCNs() ([]string, error)

+ func (rdns RDNSequence) String() string

+ type RelativeDistinguishedNameSET []AttributeTypeAndValue

+ type Scanner struct

+ LogId ct.SHA256Hash

+ LogUri string

+ func NewScanner(logUri string, logId ct.SHA256Hash, publicKey crypto.PublicKey, ...) *Scanner

+ func (s *Scanner) CheckConsistency(first *ct.SignedTreeHead, second *ct.SignedTreeHead) (bool, error)

+ func (s *Scanner) GetSTH() (*ct.SignedTreeHead, error)

+ func (s *Scanner) MakeCollapsedMerkleTree(sth *ct.SignedTreeHead) (*CollapsedMerkleTree, error)

+ func (s *Scanner) Scan(startIndex int64, endIndex int64, processCert ProcessCallback, ...) error

+ func (s Scanner) Log(msg string)

+ func (s Scanner) Warn(msg string)

+ type ScannerOptions struct

+ BatchSize int

+ NumWorkers int

+ Quiet bool

+ func DefaultScannerOptions() *ScannerOptions

+ type SubjectAltName struct

+ Type int

+ Value []byte

+ func (san SubjectAltName) String() string

+ type TBSCertificate struct

+ Extensions []Extension

+ Issuer asn1.RawValue

+ PublicKey asn1.RawValue

+ Raw asn1.RawContent

+ SerialNumber asn1.RawValue

+ SignatureAlgorithm asn1.RawValue

+ Subject asn1.RawValue

+ SubjectUniqueId asn1.BitString

+ UniqueId asn1.BitString

+ Validity asn1.RawValue

+ Version int

+ func ParseTBSCertificate(tbsBytes []byte) (*TBSCertificate, error)

+ func ReconstructPrecertTBS(tbs *TBSCertificate) (*TBSCertificate, error)

+ func (tbs *TBSCertificate) GetExtension(id asn1.ObjectIdentifier) []Extension

+ func (tbs *TBSCertificate) GetRawIssuer() []byte

+ func (tbs *TBSCertificate) GetRawPublicKey() []byte

+ func (tbs *TBSCertificate) GetRawSubject() []byte

+ func (tbs *TBSCertificate) ParseBasicConstraints() (*bool, error)

+ func (tbs *TBSCertificate) ParseIssuer() (RDNSequence, error)

+ func (tbs *TBSCertificate) ParseSerialNumber() (*big.Int, error)

+ func (tbs *TBSCertificate) ParseSubject() (RDNSequence, error)

+ func (tbs *TBSCertificate) ParseSubjectAltNames() ([]SubjectAltName, error)

+ func (tbs *TBSCertificate) ParseSubjectCommonNames() ([]string, error)

+ func (tbs *TBSCertificate) ParseValidity() (*CertValidity, error)