cert

func CreateX509Cert ¶

func CreateX509Cert(pkToken *pktoken.PKToken, signer crypto.Signer) ([]byte, error)

CreateX509Cert generates a self-signed x509 cert from a PK token

• OP 'sub' claim is mapped to the CN and SANs fields
• User public key is mapped to the RawSubjectPublicKeyInfo field
• Raw PK token is mapped to the SubjectKeyId field

func PktToX509Template ¶

func PktToX509Template(pkt *pktoken.PKToken) (*x509.Certificate, error)

PktToX509Template takes a PK Token and returns a X.509 certificate template with the fields of the template set to the values in the X509