certutil

package

Go to main page

Versions in this module

v0

v0.19.156

Apr 29, 2024

v0.19.155

Apr 29, 2024

v0.18.381

Mar 8, 2024

v0.18.4

Apr 2, 2024

v0.18.3

Apr 2, 2024

v0.17.0

Mar 7, 2024

v0.16.0

Jan 14, 2024

v0.15.0

Dec 13, 2023

v0.14.0

Dec 9, 2023

v0.13.0

Nov 27, 2023

v0.12.0

Nov 17, 2023

v0.11.0

Oct 22, 2023

v0.10.0

Oct 13, 2023

v0.9.0

Sep 22, 2023

v0.7.0

Apr 7, 2023

v0.6.0

Jan 22, 2023

v0.5.0

Dec 10, 2022

v0.4.0

Oct 1, 2022

v0.3.0

Sep 27, 2022

Changes in this version

+ func BuildBundle(c *Chain) (bundle *Bundle, status *BundleStatus, err error)

+ func CreateOCSPRequest(crt, issuer *x509.Certificate, hash crypto.Hash) ([]byte, error)

+ func HasOCSPNoCheck(crt *x509.Certificate) bool

+ func IsOCSPSigner(crt *x509.Certificate) bool

type Bundler

+ func LoadBundler(rootBundleFile, intBundleFile string, opt ...Option) (*Bundler, error)

+ func (b *Bundler) ChainFromFile(bundleFile, keyFile string, password string) (*Chain, error)

+ func (b *Bundler) ChainFromPEM(certsRaw, keyPEM []byte, password string) (*Chain, error)

type KeyInfo

+ Hash crypto.Hash

type Option

+ func WithAIA(enable bool) Option

+ func WithBundleFlavor(flavor BundleFlavor) Option

+ func WithHTTPClient(client *http.Client) Option

v0.2.0

Jul 20, 2022

Changes in this version

+ const BundleExpiringBit

+ const BundleNotUbiquitousBit

+ var HTTPClient = http.DefaultClient

+ var IntermediateStash string

+ func ExpiryTime(chain []*x509.Certificate) (notAfter time.Time)

+ func FindExtension(list []pkix.Extension, oid asn1.ObjectIdentifier) *pkix.Extension

+ func FindExtensionValue(list []pkix.Extension, oid asn1.ObjectIdentifier) []byte

+ func GetKeyDERFromPEM(in []byte, password []byte) ([]byte, error)

+ func ParsePrivateKeyDER(keyDER []byte) (key crypto.Signer, err error)

+ func ParsePrivateKeyPEM(keyPEM []byte) (key crypto.Signer, err error)

+ func ParsePrivateKeyPEMWithPassword(keyPEM []byte, password []byte) (key crypto.Signer, err error)

+ type BundleFlavor string

+ const Force

+ const Optimal

type BundleStatus

+ Code int

+ type Bundler struct

+ IntermediatePool *x509.CertPool

+ KnownIssuers map[string]bool

+ RootPool *x509.CertPool

+ func NewBundler(caBundleFile, intBundleFile string, opt ...Option) (*Bundler, error)

+ func NewBundlerFromPEM(caBundlePEM, intBundlePEM []byte, opt ...Option) (*Bundler, error)

+ func (b *Bundler) Bundle(certs []*x509.Certificate, key crypto.Signer, flavor BundleFlavor) (*Chain, error)

+ func (b *Bundler) BundleFromFile(bundleFile, keyFile string, flavor BundleFlavor, password string) (*Chain, error)

+ func (b *Bundler) BundleFromPEMorDER(certsRaw, keyPEM []byte, flavor BundleFlavor, password string) (*Chain, error)

+ func (b *Bundler) VerifyOptions() x509.VerifyOptions

+ type Chain struct

+ Cert *x509.Certificate

+ Chain []*x509.Certificate

+ Expires time.Time

+ Hostnames []string

+ Issuer *pkix.Name

+ Key interface{}

+ LeafExpires time.Time

+ Root *x509.Certificate

+ Status *BundleStatus

+ Subject *pkix.Name

+ type Option func(*options)

+ func WithKeyUsages(usages ...x509.ExtKeyUsage) Option

v0.1.1

Feb 21, 2022

Changes in this version

+ var RandReader randSource = rand.Reader

+ func CreatePoolFromPEM(pemBytes []byte) (*x509.CertPool, error)

+ func Digest(hash crypto.Hash, data []byte) []byte

+ func EncodePrivateKeyToPEM(priv crypto.PrivateKey) (key []byte, err error)

+ func EncodePublicKeyToPEM(pubKey crypto.PublicKey) ([]byte, error)

+ func EncodeToPEM(out io.Writer, withComments bool, certs ...*x509.Certificate) error

+ func EncodeToPEMString(withComments bool, certs ...*x509.Certificate) (string, error)

+ func FindIssuer(crt *x509.Certificate, chain []*x509.Certificate, root *x509.Certificate) *x509.Certificate

+ func GetAuthorityKeyID(c *x509.Certificate) string

+ func GetIssuerID(c *x509.Certificate) string

+ func GetSubjectID(c *x509.Certificate) string

+ func GetSubjectKeyID(c *x509.Certificate) string

+ func GetThumbprintStr(c *x509.Certificate) string

+ func HashAlgoToStr(hash crypto.Hash) string

+ func HashToBase64URL(hash crypto.Hash, data []byte) string

+ func HashToHex(hash crypto.Hash, data []byte) string

+ func JoinPEM(p1, p2 []byte) []byte

+ func LoadAndVerifyBundleFromPEM(certFile, intCAFile, rootFile string) (*Bundle, *BundleStatus, error)

+ func LoadChainFromPEM(certFile string) ([]*x509.Certificate, error)

+ func LoadFromPEM(certFile string) (*x509.Certificate, error)

+ func LoadPEMFiles(files ...string) ([]byte, error)

+ func NameToString(name *pkix.Name) string

+ func NewHash(algo string) (hash.Hash, error)

+ func ParseChainFromPEM(certificateChainPem []byte) ([]*x509.Certificate, error)

+ func ParseFromPEM(bytes []byte) (*x509.Certificate, error)

+ func ParseHexDigestWithPrefix(digest string) (hash.Hash, []byte, error)

+ func ParseRSAPublicKeyFromPEM(key []byte) (*rsa.PublicKey, error)

+ func Random(byteLength int) []byte

+ func RandomString(byteLength int) string

+ func SHA1(data []byte) []byte

+ func SHA1Base64(data []byte) string

+ func SHA1Hex(data []byte) string

+ func SHA256(data []byte) []byte

+ func SHA256Base64(data []byte) string

+ func SHA256Hex(data []byte) string

+ func StrToHashAlgo(algo string) crypto.Hash

+ func VerifyBundleFromPEM(certPEM, intCAPEM, rootPEM []byte) (bundle *Bundle, status *BundleStatus, err error)

+ type Bundle struct

+ CACertsPEM string

+ Cert *x509.Certificate

+ CertPEM string

+ Chain []*x509.Certificate

+ Expires time.Time

+ Hostnames []string

+ Issuer *pkix.Name

+ IssuerCert *x509.Certificate

+ IssuerID string

+ RootCert *x509.Certificate

+ RootCertPEM string

+ Subject *pkix.Name

+ SubjectID string

+ func SortBundlesByExpiration(bundles []*Bundle) []*Bundle

+ func (b *Bundle) ExpiresInHours() time.Duration

+ type BundleStatus struct

+ ExpiringSKIs []string

+ Messages []string

+ Untrusted []string

+ func (b *BundleStatus) IsExpiring() bool

+ func (b *BundleStatus) IsUntrusted() bool

+ type KeyInfo struct

+ IsPrivate bool

+ Key interface{}

+ KeySize int

+ Type string

+ func NewKeyInfo(k interface{}) (*KeyInfo, error)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL