tls

README

tls

产生自签TLS证书

Documentation

Index

• func CertificateInfo(certPath string) (*x509.Certificate, error)
• func FormatIp(ipStr string) (string, error)
• func GenKeyAndCert(hosts []string, keyFile, certFile string, types int) error
• func GenerateKey(root bool) (*rsa.PrivateKey, error)
• func GenerateRoot() (*x509.Certificate, *rsa.PrivateKey, error)
• func GmCertificateInfo(certPath string) (*x509.Certificate, error)
• func IsIP(host string) bool
• func IsIPv4(ip string) bool
• func IsIPv6(ip string) bool
• func IsSameIP(ipFirst, ipSecond string) bool
• func Pkcs12Encode(cert, key []byte, password string) (string, error)
• func ReadGmPrivKey(key []byte) (*sm2.PrivateKey, error)
• func ReadGmRootCert(cert []byte) (*x509.Certificate, error)
• func ReadPrivKey(key []byte) (*rsa.PrivateKey, error)
• func ReadPrivKeyFile(filename string) (*rsa.PrivateKey, error)
• func ReadRootCert(cert []byte) (*x509.Certificate, error)
• func ReadRootCertFile(filename string) (*x509.Certificate, error)
• func SerialNumber() *big.Int
• func UserAndHostname() string
• func WritePEM(filepath string, pem []byte) error
• type CACert
  • func (c *CACert) GenerateServer(hosts []string) ([]byte, []byte, error)
• type GmCACert
  • func GenerateGmRoot() (*GmCACert, error)
  • func (c *GmCACert) GenerateGmCert(keyFile, certFile string, types int) error
  • func (c *GmCACert) SaveGmCertAndKey(certFile, keyFile string) error

Functions

func CertificateInfo

func CertificateInfo(certPath string) (*x509.Certificate, error)

func FormatIp

func FormatIp(ipStr string) (string, error)

func GenKeyAndCert

func GenKeyAndCert(hosts []string, keyFile, certFile string, types int) error

GenKeyAndCert 生成密钥和证书 types 0 为签名证书，1 为加密证书

func GenerateKey

func GenerateKey(root bool) (*rsa.PrivateKey, error)

func GenerateRoot

func GenerateRoot() (*x509.Certificate, *rsa.PrivateKey, error)

GenerateRoot return cert, privDER, nil

func GmCertificateInfo

func GmCertificateInfo(certPath string) (*x509.Certificate, error)

func IsIP

func IsIP(host string) bool

func IsIPv4

func IsIPv4(ip string) bool

func IsIPv6

func IsIPv6(ip string) bool

func IsSameIP

func IsSameIP(ipFirst, ipSecond string) bool

func Pkcs12Encode

func Pkcs12Encode(cert, key []byte, password string) (string, error)

func ReadGmPrivKey

func ReadGmPrivKey(key []byte) (*sm2.PrivateKey, error)

func ReadGmRootCert

func ReadGmRootCert(cert []byte) (*x509.Certificate, error)

func ReadPrivKey

func ReadPrivKey(key []byte) (*rsa.PrivateKey, error)

func ReadPrivKeyFile

func ReadPrivKeyFile(filename string) (*rsa.PrivateKey, error)

func ReadRootCert

func ReadRootCert(cert []byte) (*x509.Certificate, error)

func ReadRootCertFile

func ReadRootCertFile(filename string) (*x509.Certificate, error)

func SerialNumber

func SerialNumber() *big.Int

func UserAndHostname

func UserAndHostname() string

func WritePEM

func WritePEM(filepath string, pem []byte) error

Types

type CACert

type CACert struct {
	Cert *x509.Certificate
	Key  *rsa.PrivateKey
}

func (*CACert) GenerateServer

func (c *CACert) GenerateServer(hosts []string) ([]byte, []byte, error)

GenerateServer return certPEM, privPEM, nil

type GmCACert

type GmCACert struct {
	Cert  *x509.Certificate
	Key   *sm2.PrivateKey
	Hosts []string // 证书支持的主机名列表
}

GmCACert 国密CA证书结构体

func GenerateGmRoot

func GenerateGmRoot() (*GmCACert, error)

GenerateGmRoot 生成国密根证书

func (*GmCACert) GenerateGmCert

func (c *GmCACert) GenerateGmCert(keyFile, certFile string, types int) error

GenerateGmCert 使用国密根证书生成子证书 types 0 为签名证书，1 为加密证书

func (*GmCACert) SaveGmCertAndKey

func (c *GmCACert) SaveGmCertAndKey(certFile, keyFile string) error

SaveGmCertAndKey 保存国密证书和密钥到文件