lib

Documentation

Index

• func EncodeCRIToObject(cri *tls.CertificateRequestInfo) (interface{}, error)
• func EncodeTLSInfoToText(tcs *tls.ConnectionState, cri *tls.CertificateRequestInfo) string
• func EncodeTLSToObject(t *tls.ConnectionState) interface{}
• func EncodeX509ToJSON(cert *x509.Certificate) []byte
• func EncodeX509ToObject(cert *x509.Certificate) interface{}
• func EncodeX509ToPEM(cert *x509.Certificate, headers map[string]string) *pem.Block
• func EncodeX509ToText(cert *x509.Certificate, terminalWidth int, verbose bool) []byte
• func IsSelfSigned(cert *x509.Certificate) bool
• func PrintCommonName(name pkix.Name) (out string)
• func PrintShortName(name pkix.Name) (out string)
• func PrintVerifyResult(out io.Writer, result SimpleVerification)
• func ReadAsPEM(readers []io.Reader, format string, password func(string) string, ...) error
• func ReadAsPEMFromFiles(files []*os.File, format string, password func(string) string, ...) error
• func ReadAsX509(readers []io.Reader, format string, password func(string) string, ...) error
• func ReadAsX509FromFiles(files []*os.File, format string, password func(string) string, ...) error
• type CertificateRequestInfo
• type OidDescription
• type SimpleResult
  • func (s SimpleResult) MarshalJSON() ([]byte, error)
• type SimpleVerification
  • func VerifyChain(certs []*x509.Certificate, ocspStaple []byte, expectedName, caPath string) SimpleVerification
• type TLSDescription

Functions

func EncodeCRIToObject

func EncodeCRIToObject(cri *tls.CertificateRequestInfo) (interface{}, error)

EncodeCRIToObject returns a JSON-marshallable representation of a CertificateRequestInfo object.

func EncodeTLSInfoToText

func EncodeTLSInfoToText(tcs *tls.ConnectionState, cri *tls.CertificateRequestInfo) string

EncodeTLSInfoToText returns a human readable string, suitable for certigo console output.

func EncodeTLSToObject

func EncodeTLSToObject(t *tls.ConnectionState) interface{}

EncodeTLSToObject returns a JSON-marshallable description of a TLS connection

func EncodeX509ToJSON

func EncodeX509ToJSON(cert *x509.Certificate) []byte

EncodeX509ToJSON encodes an X.509 certificate into a JSON string.

func EncodeX509ToObject

func EncodeX509ToObject(cert *x509.Certificate) interface{}

EncodeX509ToObject encodes an X.509 certificate into a JSON-serializable object.

func EncodeX509ToPEM

func EncodeX509ToPEM(cert *x509.Certificate, headers map[string]string) *pem.Block

EncodeX509ToPEM converts an X.509 certificate into a PEM block for output.

func EncodeX509ToText

func EncodeX509ToText(cert *x509.Certificate, terminalWidth int, verbose bool) []byte

EncodeX509ToText encodes an X.509 certificate into human-readable text.

func IsSelfSigned

func IsSelfSigned(cert *x509.Certificate) bool

IsSelfSigned returns true iff the given certificate has a valid self-signature.

func PrintCommonName

func PrintCommonName(name pkix.Name) (out string)

PrintCommonName prints the CN from a pkix.Name, or falls back to PrintShortName if CN is missing.

func PrintShortName

func PrintShortName(name pkix.Name) (out string)

PrintShortName turns a pkix.Name into a string of RDN tuples.

func PrintVerifyResult

func PrintVerifyResult(out io.Writer, result SimpleVerification)

func ReadAsPEM

func ReadAsPEM(readers []io.Reader, format string, password func(string) string, callback func(*pem.Block, string) error) error

ReadAsPEM will read PEM blocks from the given set of inputs. Input data may be in plain-text PEM files, DER-encoded certificates or PKCS7 envelopes, or PKCS12/JCEKS keystores. All inputs will be converted to PEM blocks and passed to the callback.

func ReadAsPEMFromFiles

func ReadAsPEMFromFiles(files []*os.File, format string, password func(string) string, callback func(*pem.Block, string) error) error

ReadAsPEMFromFiles will read PEM blocks from the given set of inputs. Input data may be in plain-text PEM files, DER-encoded certificates or PKCS7 envelopes, or PKCS12/JCEKS keystores. All inputs will be converted to PEM blocks and passed to the callback.

func ReadAsX509

func ReadAsX509(readers []io.Reader, format string, password func(string) string, callback func(*x509.Certificate, string, error) error) error

ReadAsX509 will read X.509 certificates from the given set of inputs. Input data may be in plain-text PEM files, DER-encoded certificates or PKCS7 envelopes, or PKCS12/JCEKS keystores. All inputs will be converted to X.509 certificates (private keys are skipped) and passed to the callback.

func ReadAsX509FromFiles

func ReadAsX509FromFiles(files []*os.File, format string, password func(string) string, callback func(*x509.Certificate, string, error) error) error

ReadAsX509FromFiles will read X.509 certificates from the given set of inputs. Input data may be in plain-text PEM files, DER-encoded certificates or PKCS7 envelopes, or PKCS12/JCEKS keystores. All inputs will be converted to X.509 certificates (private keys are skipped) and passed to the callback.

Types

type CertificateRequestInfo

type CertificateRequestInfo struct {
	AcceptableCAs    []simplePKIXName `json:"acceptable_issuers,omitempty"`
	SignatureSchemes []string         `json:"signature_schemes,omitempty"`
}

CertificateRequestInfo has the basic information about requested client certificates

type OidDescription

type OidDescription struct {
	Name     string
	Short    string
	Slug     string
	Multiple bool
}

OidDescription returns a human-readable name, a short acronym from RFC1485, a snake_case slug suitable as a json key, and a boolean describing whether multiple copies can appear on an X509 cert.

type SimpleResult

type SimpleResult struct {
	Certificates           []*x509.Certificate `json:"certificates"`
	Formats                []string
	VerifyResult           *SimpleVerification `json:"verify_result,omitempty"`
	TLSConnectionState     *tls.ConnectionState
	CertificateRequestInfo *tls.CertificateRequestInfo
}

func (SimpleResult) MarshalJSON

func (s SimpleResult) MarshalJSON() ([]byte, error)

type SimpleVerification

type SimpleVerification struct {
	Error          string               `json:"error,omitempty"`
	OCSPStatus     *ocsp.Response       `json:"ocsp_response,omitempty"`
	OCSPWasStapled bool                 `json:"ocsp_was_stapled,omitempty"`
	OCSPError      string               `json:"ocsp_error,omitempty"`
	Chains         [][]simpleVerifyCert `json:"chains"`
}

func VerifyChain

func VerifyChain(certs []*x509.Certificate, ocspStaple []byte, expectedName, caPath string) SimpleVerification

type TLSDescription

type TLSDescription struct {
	Version string `json:"version"`
	Cipher  string `json:"cipher"`
}

TLSDescription has the basic information about a TLS connection