pkix

Jul 1, 2022

Changes in this version

+ func WithPathlenOption(pathlen int, excludePathlen bool) func(template *x509.Certificate)

type Certificate

+ func CreateCertificateAuthorityWithOptions(key *Key, organizationalUnit string, expiry time.Time, organization string, ...) (*Certificate, error)

+ func CreateIntermediateCertificateAuthorityWithOptions(crtAuth *Certificate, keyAuth *Key, csr *CertificateSigningRequest, ...) (*Certificate, error)

type Key

+ func CreateECDSAKey(c elliptic.Curve) (*Key, error)

+ func CreateEd25519Key() (*Key, error)

+ func NewKeyFromSigner(signer crypto.Signer) *Key

+ type Option func(*x509.Certificate)

Sep 20, 2019

Changes in this version

+ func ParseAndValidateURIs(uriList string) (res []*url.URL, err error)

type CertificateRevocationList

+ func (c *CertificateRevocationList) DERBytes() []byte

Aug 1, 2017

Changes in this version

type Certificate

+ func CreateIntermediateCertificateAuthority(crtAuth *Certificate, keyAuth *Key, csr *CertificateSigningRequest, years int) (*Certificate, error)

Apr 1, 2016

Changes in this version

+ func GenerateSubjectKeyID(pub crypto.PublicKey) ([]byte, error)

+ func ParseAndValidateIPs(ipList string) (res []net.IP, err error)

+ type Certificate struct

+ func CreateCertificateAuthority(key *Key, organizationalUnit string, years int, organization string, ...) (*Certificate, error)

+ func CreateCertificateHost(crtAuth *Certificate, keyAuth *Key, csr *CertificateSigningRequest, years int) (*Certificate, error)

+ func NewCertificateFromDER(derBytes []byte) *Certificate

+ func NewCertificateFromPEM(data []byte) (c *Certificate, err error)

+ func (c *Certificate) CheckAuthority() error

+ func (c *Certificate) Export() ([]byte, error)

+ func (c *Certificate) GetExpirationDuration() time.Duration

+ func (c *Certificate) GetRawCertificate() (*x509.Certificate, error)

+ func (c *Certificate) VerifyHost(hostCert *Certificate, name string) error

+ type CertificateAuthorityInfo struct

+ SerialNumber *big.Int

+ func NewCertificateAuthorityInfo(serialNumber int64) *CertificateAuthorityInfo

+ func NewCertificateAuthorityInfoFromJSON(data []byte) (*CertificateAuthorityInfo, error)

+ func (n *CertificateAuthorityInfo) Export() ([]byte, error)

+ func (n *CertificateAuthorityInfo) IncSerialNumber()

+ type CertificateRevocationList struct

+ func CreateCertificateRevocationList(key *Key, ca *Certificate, years int) (*CertificateRevocationList, error)

+ func NewCertificateRevocationListFromDER(derBytes []byte) *CertificateRevocationList

+ func NewCertificateRevocationListFromPEM(data []byte) (*CertificateRevocationList, error)

+ func (c *CertificateRevocationList) Export() ([]byte, error)

+ type CertificateSigningRequest struct

+ func CreateCertificateSigningRequest(key *Key, organizationalUnit string, ipList []net.IP, domainList []string, ...) (*CertificateSigningRequest, error)

+ func NewCertificateSigningRequestFromDER(derBytes []byte) *CertificateSigningRequest

+ func NewCertificateSigningRequestFromPEM(data []byte) (*CertificateSigningRequest, error)

+ func (c *CertificateSigningRequest) CheckSignature() error

+ func (c *CertificateSigningRequest) Export() ([]byte, error)

+ func (c *CertificateSigningRequest) GetRawCertificateSigningRequest() (*x509.CertificateRequest, error)

+ type Key struct

+ Private crypto.PrivateKey

+ Public crypto.PublicKey

+ func CreateRSAKey(rsaBits int) (*Key, error)

+ func NewKey(pub crypto.PublicKey, priv crypto.PrivateKey) *Key

+ func NewKeyFromEncryptedPrivateKeyPEM(data []byte, password []byte) (*Key, error)

+ func NewKeyFromPrivateKeyPEM(data []byte) (*Key, error)

+ func (k *Key) ExportEncryptedPrivate(password []byte) ([]byte, error)

+ func (k *Key) ExportPrivate() ([]byte, error)