x509util

Feb 1, 2024

Changes in this version

type DistinguishedName

+ func NewExtraNames(atvs []pkix.AttributeTypeAndValue) []DistinguishedName

Dec 6, 2023

Changes in this version

type CertificateRequest

+ ChallengePassword string

Oct 9, 2023

Changes in this version

+ const UserPrincipalNameType

Aug 3, 2023

Changes in this version

+ func GetFuncMap() template.FuncMap

May 30, 2023

Changes in this version

type Certificate

+ func NewCertificateFromX509(template *x509.Certificate, opts ...Option) (*Certificate, error)

Apr 6, 2023

Changes in this version

+ type SubjectAlternativeNames struct

+ DNSNames []string

+ EmailAddresses []string

+ HardwareModuleNames []HardwareModuleName

+ IPAddresses []net.IP

+ PermanentIdentifiers []PermanentIdentifier

+ TPMHardwareDetails TPMHardwareDetails

+ URIs []*url.URL

+ func ParseSubjectAlternativeNames(c *x509.Certificate) (sans SubjectAlternativeNames, err error)

+ type TPMHardwareDetails struct

+ Manufacturer string

+ Model string

+ Version string

Oct 5, 2022

Changes in this version

+ const Base64RawFingerprint

+ const Base64RawURLFingerprint

+ const Base64URLFingerprint

+ const DefaultFingerprint

+ const EmojiFingerprint

+ const WebhooksKey

type CertificateRequest

+ func NewCertificateRequestFromX509(cr *x509.CertificateRequest) *CertificateRequest

type ExtKeyUsage

+ func (k ExtKeyUsage) MarshalJSON() ([]byte, error)

type KeyUsage

+ func (k KeyUsage) MarshalJSON() ([]byte, error)

type TemplateData

+ func (t TemplateData) SetWebhook(webhookName string, data interface{})

Aug 31, 2022

Changes in this version

+ const DefaultAttestedLeafTemplate

type TemplateData

+ func (t TemplateData) SetSubjectAlternativeNames(sans ...SubjectAlternativeName)

Aug 25, 2022

Changes in this version

+ func ValidateTemplate(text []byte) error

+ func ValidateTemplateData(data []byte) error

Aug 22, 2022

Changes in this version

+ const HardwareModuleNameType

+ type HardwareModuleName struct

+ SerialNumber []byte

+ Type ObjectIdentifier

type PermanentIdentifier

+ Identifier string

type SubjectAlternativeName

+ ASN1Value json.RawMessage

Aug 11, 2022

Changes in this version

+ const DirectoryNameType

+ const EDIPartyNameType

+ const PermanentIdentifierType

+ const RegisteredIDType

+ const X400AddressType

+ func SanitizeName(domain string) (string, error)

type ObjectIdentifier

+ func (o ObjectIdentifier) Equal(v ObjectIdentifier) bool

+ type PermanentIdentifier struct

+ Assigner asn1.ObjectIdentifier

+ IdentifierValue string

type Subject

+ func (s Subject) IsEmpty() bool

type SubjectAlternativeName

+ func (s SubjectAlternativeName) RawValue() (asn1.RawValue, error)

Mar 31, 2022

Changes in this version

+ type DistinguishedName struct

+ Type ObjectIdentifier

+ Value interface{}

type Name

+ ExtraNames []DistinguishedName

Jan 6, 2022

Changes in this version

+ const AuthorizationChainKey

+ const AuthorizationCrtKey

type TemplateData

+ func (t TemplateData) SetAuthorizationCertificate(crt interface{})

+ func (t TemplateData) SetAuthorizationCertificateChain(chain interface{})

Apr 14, 2021

Changes in this version

+ func ReadCertPool(path string) (*x509.CertPool, error)

Oct 26, 2020

Changes in this version

+ func CreateCertificateTemplate(cr *x509.CertificateRequest) (*x509.Certificate, error)

Sep 21, 2020

Changes in this version

+ const DefaultAdminLeafTemplate

Sep 1, 2020

Changes in this version

type Certificate

+ UnknownExtKeyUsage UnknownExtKeyUsage

+ type UnknownExtKeyUsage MultiObjectIdentifier

+ func (u *UnknownExtKeyUsage) UnmarshalJSON(data []byte) error

+ func (u UnknownExtKeyUsage) MarshalJSON() ([]byte, error)

+ func (u UnknownExtKeyUsage) Set(c *x509.Certificate)

Aug 31, 2020

Changes in this version

+ const DSAWithSHA1

+ const DSAWithSHA256

+ const DefaultCertificateRequestTemplate

+ const ECDSAWithSHA1

+ const ECDSAWithSHA256

+ const ECDSAWithSHA384

+ const ECDSAWithSHA512

+ const MD2WithRSA

+ const MD5WithRSA

+ const PureEd25519

+ const SHA1WithRSA

+ const SHA256WithRSA

+ const SHA256WithRSAPSS

+ const SHA384WithRSA

+ const SHA384WithRSAPSS

+ const SHA512WithRSA

+ const SHA512WithRSAPSS

type CertificateRequest

+ SANs []SubjectAlternativeName

+ Signer crypto.Signer

+ func NewCertificateRequest(signer crypto.Signer, opts ...Option) (*CertificateRequest, error)

+ func (c *CertificateRequest) GetCertificateRequest() (*x509.CertificateRequest, error)

type SignatureAlgorithm

+ func (s SignatureAlgorithm) MarshalJSON() ([]byte, error)

Aug 11, 2020

Changes in this version

+ func EncodedFingerprint(cert *x509.Certificate, encoding FingerprintEncoding) string

+ func Fingerprint(cert *x509.Certificate) string

+ type FingerprintEncoding int

+ const Base64Fingerprint

+ const Base64UrlFingerprint

+ const HexFingerprint

Aug 7, 2020

Changes in this version

+ const AutoType

+ const CertificateRequestKey

+ const CertificateRequestTemplate

+ const DNSType

+ const DSA_SHA1

+ const DSA_SHA256

+ const DefaultIIDLeafTemplate

+ const DefaultIntermediateTemplate

+ const DefaultLeafTemplate

+ const DefaultRootTemplate

+ const ECDSA_SHA1

+ const ECDSA_SHA256

+ const ECDSA_SHA384

+ const ECDSA_SHA512

+ const Ed25519

+ const EmailType

+ const IPType

+ const InsecureKey

+ const MD2_RSA

+ const MD5_RSA

+ const SANsKey

+ const SHA1_RSA

+ const SHA256_RSA

+ const SHA256_RSAPSS

+ const SHA384_RSA

+ const SHA384_RSAPSS

+ const SHA512_RSA

+ const SHA512_RSAPSS

+ const SubjectKey

+ const TokenKey

+ const URIType

+ const UserKey

+ var ExtKeyUsageAny = convertName("Any")

+ var ExtKeyUsageClientAuth = convertName("ClientAuth")

+ var ExtKeyUsageCodeSigning = convertName("CodeSigning")

+ var ExtKeyUsageEmailProtection = convertName("EmailProtection")

+ var ExtKeyUsageIPSECEndSystem = convertName("IPSECEndSystem")

+ var ExtKeyUsageIPSECTunnel = convertName("IPSECTunnel")

+ var ExtKeyUsageIPSECUser = convertName("IPSECUser")

+ var ExtKeyUsageMicrosoftCommercialCodeSigning = convertName("MicrosoftCommercialCodeSigning")

+ var ExtKeyUsageMicrosoftKernelCodeSigning = convertName("MicrosoftKernelCodeSigning")

+ var ExtKeyUsageMicrosoftServerGatedCrypto = convertName("MicrosoftServerGatedCrypto")

+ var ExtKeyUsageNetscapeServerGatedCrypto = convertName("NetscapeServerGatedCrypto")

+ var ExtKeyUsageOCSPSigning = convertName("OCSPSigning")

+ var ExtKeyUsageServerAuth = convertName("ServerAuth")

+ var ExtKeyUsageTimeStamping = convertName("TimeStamping")

+ var KeyUsageCRLSign = convertName("CRLSign")

+ var KeyUsageCertSign = convertName("CertSign")

+ var KeyUsageContentCommitment = convertName("ContentCommitment")

+ var KeyUsageDataEncipherment = convertName("DataEncipherment")

+ var KeyUsageDecipherOnly = convertName("DecipherOnly")

+ var KeyUsageDigitalSignature = convertName("DigitalSignature")

+ var KeyUsageEncipherOnly = convertName("EncipherOnly")

+ var KeyUsageKeyAgreement = convertName("KeyAgreement")

+ var KeyUsageKeyEncipherment = convertName("KeyEncipherment")

+ func CreateCertificate(template, parent *x509.Certificate, pub crypto.PublicKey, signer crypto.Signer) (*x509.Certificate, error)

+ func CreateCertificateRequest(commonName string, sans []string, signer crypto.Signer) (*x509.CertificateRequest, error)

+ func SplitSANs(sans []string) (dnsNames []string, ips []net.IP, emails []string, uris []*url.URL)

+ type AuthorityKeyID []byte

+ func (id AuthorityKeyID) Set(c *x509.Certificate)

+ type BasicConstraints struct

+ IsCA bool

+ MaxPathLen int

+ func (b BasicConstraints) Set(c *x509.Certificate)

+ type CRLDistributionPoints MultiString

+ func (u *CRLDistributionPoints) UnmarshalJSON(data []byte) error

+ func (u CRLDistributionPoints) Set(c *x509.Certificate)

+ type Certificate struct

+ AuthorityKeyID AuthorityKeyID

+ BasicConstraints *BasicConstraints

+ CRLDistributionPoints CRLDistributionPoints

+ DNSNames MultiString

+ EmailAddresses MultiString

+ ExtKeyUsage ExtKeyUsage

+ Extensions []Extension

+ IPAddresses MultiIP

+ Issuer Issuer

+ IssuingCertificateURL IssuingCertificateURL

+ KeyUsage KeyUsage

+ NameConstraints *NameConstraints

+ OCSPServer OCSPServer

+ PolicyIdentifiers PolicyIdentifiers

+ PublicKey interface{}

+ PublicKeyAlgorithm x509.PublicKeyAlgorithm

+ SANs []SubjectAlternativeName

+ SerialNumber SerialNumber

+ SignatureAlgorithm SignatureAlgorithm

+ Subject Subject

+ SubjectKeyID SubjectKeyID

+ URIs MultiURL

+ Version int

+ func NewCertificate(cr *x509.CertificateRequest, opts ...Option) (*Certificate, error)

+ func (c *Certificate) GetCertificate() *x509.Certificate

+ type CertificateRequest struct

+ DNSNames MultiString

+ EmailAddresses MultiString

+ Extensions []Extension

+ IPAddresses MultiIP

+ PublicKey interface{}

+ PublicKeyAlgorithm x509.PublicKeyAlgorithm

+ Signature []byte

+ SignatureAlgorithm x509.SignatureAlgorithm

+ Subject Subject

+ URIs MultiURL

+ Version int

+ func (c *CertificateRequest) GetCertificate() *Certificate

+ func (c *CertificateRequest) GetLeafCertificate() *Certificate

+ type ExtKeyUsage []x509.ExtKeyUsage

+ func (k *ExtKeyUsage) UnmarshalJSON(data []byte) error

+ func (k ExtKeyUsage) Set(c *x509.Certificate)

+ type Extension struct

+ Critical bool

+ ID ObjectIdentifier

+ Value []byte

+ func (e Extension) Set(c *x509.Certificate)

+ type Issuer Name

+ func (i *Issuer) UnmarshalJSON(data []byte) error

+ func (i Issuer) Set(c *x509.Certificate)

+ type IssuingCertificateURL MultiString

+ func (u *IssuingCertificateURL) UnmarshalJSON(data []byte) error

+ func (u IssuingCertificateURL) Set(c *x509.Certificate)

+ type KeyUsage x509.KeyUsage

+ func (k *KeyUsage) UnmarshalJSON(data []byte) error

+ func (k KeyUsage) Set(c *x509.Certificate)

+ type MultiIP []net.IP

+ func (m *MultiIP) UnmarshalJSON(data []byte) error

+ type MultiIPNet []*net.IPNet

+ func (m *MultiIPNet) UnmarshalJSON(data []byte) error

+ func (m MultiIPNet) MarshalJSON() ([]byte, error)

+ type MultiObjectIdentifier []asn1.ObjectIdentifier

+ func (m *MultiObjectIdentifier) UnmarshalJSON(data []byte) error

+ func (m MultiObjectIdentifier) MarshalJSON() ([]byte, error)

+ type MultiString []string

+ func (m *MultiString) UnmarshalJSON(data []byte) error

+ type MultiURL []*url.URL

+ func (m *MultiURL) UnmarshalJSON(data []byte) error

+ func (m MultiURL) MarshalJSON() ([]byte, error)

+ type Name struct

+ CommonName string

+ Country MultiString

+ Locality MultiString

+ Organization MultiString

+ OrganizationalUnit MultiString

+ PostalCode MultiString

+ Province MultiString

+ SerialNumber string

+ StreetAddress MultiString

+ func (n *Name) UnmarshalJSON(data []byte) error

+ type NameConstraints struct

+ Critical bool

+ ExcludedDNSDomains MultiString

+ ExcludedEmailAddresses MultiString

+ ExcludedIPRanges MultiIPNet

+ ExcludedURIDomains MultiString

+ PermittedDNSDomains MultiString

+ PermittedEmailAddresses MultiString

+ PermittedIPRanges MultiIPNet

+ PermittedURIDomains MultiString

+ func (n NameConstraints) Set(c *x509.Certificate)

+ type OCSPServer MultiString

+ func (o *OCSPServer) UnmarshalJSON(data []byte) error

+ func (o OCSPServer) Set(c *x509.Certificate)

+ type ObjectIdentifier asn1.ObjectIdentifier

+ func (o *ObjectIdentifier) UnmarshalJSON(data []byte) error

+ func (o ObjectIdentifier) MarshalJSON() ([]byte, error)

+ type Option func(cr *x509.CertificateRequest, o *Options) error

+ func WithTemplate(text string, data TemplateData) Option

+ func WithTemplateBase64(s string, data TemplateData) Option

+ func WithTemplateFile(path string, data TemplateData) Option

+ type Options struct

+ CertBuffer *bytes.Buffer

+ type PolicyIdentifiers MultiObjectIdentifier

+ func (p *PolicyIdentifiers) UnmarshalJSON(data []byte) error

+ func (p PolicyIdentifiers) MarshalJSON() ([]byte, error)

+ func (p PolicyIdentifiers) Set(c *x509.Certificate)

+ type SerialNumber struct

+ func (s *SerialNumber) MarshalJSON() ([]byte, error)

+ func (s *SerialNumber) UnmarshalJSON(data []byte) error

+ func (s SerialNumber) Set(c *x509.Certificate)

+ type SignatureAlgorithm x509.SignatureAlgorithm

+ func (s *SignatureAlgorithm) UnmarshalJSON(data []byte) error

+ func (s SignatureAlgorithm) Set(c *x509.Certificate)

+ type Subject Name

+ func (s *Subject) UnmarshalJSON(data []byte) error

+ func (s Subject) Set(c *x509.Certificate)

+ type SubjectAlternativeName struct

+ Type string

+ Value string

+ func CreateSANs(sans []string) []SubjectAlternativeName

+ func (s SubjectAlternativeName) Set(c *x509.Certificate)

+ type SubjectKeyID []byte

+ func (id SubjectKeyID) Set(c *x509.Certificate)

+ type TemplateData map[string]interface

+ func (t TemplateData) Set(key string, v interface{})

+ func (t TemplateData) SetCertificateRequest(cr *x509.CertificateRequest)

+ func (t TemplateData) SetCommonName(cn string)

+ func (t TemplateData) SetInsecure(key string, v interface{})

+ func (t TemplateData) SetSANs(sans []string)

+ func (t TemplateData) SetSubject(v Subject)

+ func (t TemplateData) SetToken(v interface{})

+ func (t TemplateData) SetUserData(v interface{})

+ func CreateTemplateData(commonName string, sans []string) TemplateData

+ func NewTemplateData() TemplateData

+ type TemplateError struct

+ Message string

+ func (e *TemplateError) Error() string