certificate

Documentation

Index

• func Get(network, ip, port string, timeout time.Duration, servername string) ([]x509.Certificate, error)
• func Verify(certs []x509.Certificate, servername string) error
• type Additional
• type Cert
  • func Scan(network, ip, port string, timeout time.Duration, servername string) (Cert, error)
• type PubKey

Functions

func Get

func Get(network, ip, port string, timeout time.Duration, servername string) ([]x509.Certificate, error)

Get the certificate from network://ip:port without verification.

Servername is used for SNI.

func Verify

func Verify(certs []x509.Certificate, servername string) error

Verify the certificate chain.

Types

type Additional

type Additional struct {
	CommonName         string
	Hash               [32]byte
	NotAfter           time.Time
	Issuer             string
	PublicKey          PubKey
	SignatureAlgorithm x509.SignatureAlgorithm
}

Additional is the additional certificates (eg.: intermediate cert)

type Cert

type Cert struct {
	CommonName         string
	Hash               [32]byte // SHA256
	AlternativeNames   []string
	SignatureAlgorithm x509.SignatureAlgorithm
	PublicKey          PubKey
	SerialNumber       *big.Int
	Issuer             string
	NotBefore          time.Time
	NotAfter           time.Time
	Verified           bool
	VerifiedError      error // This is set if Verified == false
	Chain              []Additional
}

Cert is hold the fields "interesting" part of the certficate chain.

func Scan

func Scan(network, ip, port string, timeout time.Duration, servername string) (Cert, error)

Scan get, verify and parse certificate on the certificate from network://ip:port.

type PubKey

type PubKey struct {
	Algo x509.PublicKeyAlgorithm
	Key  any // *rsa.PublicKey, *ed25519.PublicKey, ...
}