selfca

Documentation

Index

• Variables
• func ValidateCACertificate(cert *x509.Certificate, key crypto.PublicKey) error
• type CA
  • func NewCA(key crypto.Signer, cert *x509.Certificate) (*CA, error)
  • func (ca *CA) Certificate() *x509.Certificate
  • func (ca *CA) EncodedCertificate() []byte
  • func (ca *CA) EncodedKey() []byte
  • func (ca *CA) PrivateKey() crypto.Signer
  • func (ca *CA) Sign(csrPEM []byte, keyUsage x509.KeyUsage, extKeyUsage []x509.ExtKeyUsage) (*x509.Certificate, error)

Variables

var (
	CertificateExpiredError     = errors.New("expired")
	CertificateInvalidDateError = errors.New("invalid date")
	CertificateIsNotCAError     = errors.New("certificate is not for CA")
	CertificateInvalidError     = errors.New("invalid")
)

Functions

func ValidateCACertificate

func ValidateCACertificate(cert *x509.Certificate, key crypto.PublicKey) error

Types

type CA

type CA struct {
	// contains filtered or unexported fields
}

CA type representation for a self-signed certificate authority

func NewCA

func NewCA(key crypto.Signer, cert *x509.Certificate) (*CA, error)

NewCA creates a new CA object for given CA certificate and private key. If both of caCert and key are nil, generates a new private key and a self-signed certificate

func (*CA) Certificate

func (ca *CA) Certificate() *x509.Certificate

Certificate returns root ca certificate used

func (*CA) EncodedCertificate

func (ca *CA) EncodedCertificate() []byte

EncodedCertificate returns encoded root ca certificate used

func (*CA) EncodedKey

func (ca *CA) EncodedKey() []byte

EncodedKey returns encoded private key used

func (*CA) PrivateKey

func (ca *CA) PrivateKey() crypto.Signer

PrivateKey returns private key used

func (*CA) Sign

func (ca *CA) Sign(csrPEM []byte, keyUsage x509.KeyUsage, extKeyUsage []x509.ExtKeyUsage) (*x509.Certificate, error)