aia

README

AIA (Authority Information Access) Transport Go

AIA-Transport-Go provides an http.Transport which uses the AIA (Authority Information Access) X.509 extension to resolve incomplete certificate chains during the tls handshake. See rfc3280 for more details.

Installation

go get github.com/fcjr/aia-transport-go

Usage

tr, err := aia.NewTransport()
if err != nil {
    log.Fatal(err)
}
client := http.Client{
    Transport: tr,
}
res, err := client.Get("https://incomplete-chain.badssl.com/")
if err != nil {
    log.Fatal(err)
}
fmt.Println(res.Status)

Todos

• Follow single incomplete AIA chain
• Tests
• CI & Code Coverage
• Documentation
• Chain Caching
• Certificate Caching
• Follow all possible issuing urls
• Benchmarks

Documentation

Overview

Package aia provides an http.Transport which uses the AIA (Authority Information Access) X.509 extension to resolve incomplete certificate chains during the tls handshake. See https://tools.ietf.org/html/rfc3280#section-4.2.2.1 for more details.

Usage

To use simply create a new transport via NewTransport() and use it in your http.Client.

tr, err := aia.NewTransport()
if err != nil {
  log.Fatal(err)
}
client := http.Client{
  Transport: tr,
}
res, err := client.Get("https://incomplete-chain.badssl.com/")
if err != nil {
  log.Fatal(err)
}
fmt.Println(res.Status)

Index

• func NewTransport() (*http.Transport, error)

Examples

• NewTransport

Functions

func NewTransport

func NewTransport() (*http.Transport, error)

NewTransport returns a http.Transport that supports AIA (Authority Information Access) resolution for incomplete certificate chains.

Example

package main

import (
	"fmt"
	"log"
	"net/http"

	"github.com/fcjr/aia-transport-go"
)

func main() {
	tr, err := aia.NewTransport()
	if err != nil {
		log.Fatal(err)
	}
	client := http.Client{
		Transport: tr,
	}
	res, err := client.Get("https://incomplete-chain.badssl.com/")
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println(res.Status)

}

Output:
200 OK