certstore

Sep 20, 2023 GO-2023-2133

  GO-2023-2133: Authorization bypass in github.com/nats-io/nats-server/v2

Sep 19, 2023 GO-2023-2133

  GO-2023-2133: Authorization bypass in github.com/nats-io/nats-server/v2

Sep 6, 2023 GO-2023-2133

  GO-2023-2133: Authorization bypass in github.com/nats-io/nats-server/v2

Aug 4, 2023 GO-2023-2133

  GO-2023-2133: Authorization bypass in github.com/nats-io/nats-server/v2

Changes in this version

+ func GetLeafIssuer(leaf *x509.Certificate, vOpts x509.VerifyOptions) (issuer *x509.Certificate)

Jul 13, 2023 GO-2023-2133

  GO-2023-2133: Authorization bypass in github.com/nats-io/nats-server/v2

Changes in this version

+ const MATCHBYEMPTY

+ const STOREEMPTY

+ var ErrBadCertMatchByField = errors.New("expected 'cert_match_by' to be a valid non-empty string")

+ var ErrBadCertMatchField = errors.New("expected 'cert_match' to be a valid non-empty string")

+ var ErrBadCertStore = errors.New("cert store type not implemented")

+ var ErrBadCertStoreField = errors.New("expected 'cert_store' to be a valid non-empty string")

+ var ErrBadCryptoStoreProvider = errors.New("unable to open certificate store or store not available")

+ var ErrBadECCCurveName = errors.New("unsupported ECC curve name")

+ var ErrBadMatchByType = errors.New("cert match by type not implemented")

+ var ErrBadPublicKeyAlgorithm = errors.New("unsupported public key algorithm")

+ var ErrBadRSAHashAlgorithm = errors.New("unsupported RSA hash algorithm")

+ var ErrBadSigningAlgorithm = errors.New("unsupported signing algorithm")

+ var ErrConflictCertFileAndStore = errors.New("'cert_file' and 'cert_store' may not both be configured")

+ var ErrExtractPropertyFromKey = errors.New("unable to extract property from key")

+ var ErrExtractingECCPublicKey = errors.New("unable to extract ECC public key from store")

+ var ErrExtractingPrivateKeyMetadata = errors.New("unable to extract private key metadata")

+ var ErrExtractingPublicKey = errors.New("unable to extract public key from store")

+ var ErrExtractingRSAPublicKey = errors.New("unable to extract RSA public key from store")

+ var ErrFailedCertSearch = errors.New("unable to find certificate in store")

+ var ErrFailedX509Extract = errors.New("unable to extract x509 from certificate")

+ var ErrNoPrivateKeyStoreRef = errors.New("unable to obtain private key handle from store")

+ var ErrOSNotCompatCertStore = errors.New("cert_store not compatible with current operating system")

+ var ErrStoreECDSASigningError = errors.New("unable to obtain ECDSA signature from store")

+ var ErrStoreRSASigningError = errors.New("unable to obtain RSA signature from store")

+ var MatchByMap = map[string]MatchByType

+ var StoreMap = map[string]StoreType

+ var StoreOSMap = map[StoreType]string

+ var Usage = ...

+ func TLSConfig(certStore StoreType, certMatchBy MatchByType, certMatch string, ...) error

+ type MatchByType int

+ func ParseCertMatchBy(certMatchBy string) (MatchByType, error)

+ type StoreType int

+ func ParseCertStore(certStore string) (StoreType, error)