ocsputil

Documentation

Index

• Constants
• func GetOCSPResponse(cert *x509.Certificate, issuer *x509.Certificate) (string, []byte, error)
• func VerifyAuthorizedResponder(responderCert, issuer *x509.Certificate, intermediateCerts []*x509.Certificate, ...) error
• type CRLReasonCode
  • func (c CRLReasonCode) String() string
• type CertificateStatus
  • func (c CertificateStatus) Message() string
  • func (c CertificateStatus) String() string
• type ResponseStatus
  • func (r ResponseStatus) Message() string
  • func (r ResponseStatus) String() string

Constants

const NoResponseStatus = ocsp.ResponseStatus(-1)

Functions

func GetOCSPResponse

func GetOCSPResponse(cert *x509.Certificate, issuer *x509.Certificate) (string, []byte, error)

GetOCSPResponse sends the request to the OCSP Responder and gets the response from the OCSP Responder.

func VerifyAuthorizedResponder

func VerifyAuthorizedResponder(responderCert, issuer *x509.Certificate, intermediateCerts []*x509.Certificate, rootCertPool *x509.CertPool, currentTime time.Time) error

VerifyAuthorizedResponder verifies the certificate of the authorized responder.

Types

type CRLReasonCode

type CRLReasonCode int

CRLReasonCode is a CRL reason code.

const (
	Unspecified          CRLReasonCode = 0
	KeyCompromise        CRLReasonCode = 1
	CACompromise         CRLReasonCode = 2
	AffiliationChanged   CRLReasonCode = 3
	Superseded           CRLReasonCode = 4
	CessationOfOperation CRLReasonCode = 5
	CertificateHold      CRLReasonCode = 6
	RemoveFromCRL        CRLReasonCode = 8
	PrivilegeWithdrawn   CRLReasonCode = 9
	AACompromise         CRLReasonCode = 10
)

func (CRLReasonCode) String

func (c CRLReasonCode) String() string

type CertificateStatus

type CertificateStatus int

CertificateStatus is an OCSP certificate status.

const (
	// Good means that the certificate is valid.
	Good CertificateStatus = iota
	// Revoked means that the certificate has been deliberately revoked.
	Revoked
	// Unknown means that the OCSP responder doesn't know about the certificate.
	Unknown
)

func (CertificateStatus) Message

func (c CertificateStatus) Message() string

func (CertificateStatus) String

func (c CertificateStatus) String() string

type ResponseStatus

type ResponseStatus ocsp.ResponseStatus

ResponseStatus is a wrapper of ocsp.ResponseStatus.

const (
	Successful       ResponseStatus = 0
	MalformedRequest ResponseStatus = 1
	InternalError    ResponseStatus = 2
	TryLater         ResponseStatus = 3
	SigRequired      ResponseStatus = 5
	Unauthorized     ResponseStatus = 6
)

func (ResponseStatus) Message

func (r ResponseStatus) Message() string

func (ResponseStatus) String

func (r ResponseStatus) String() string