cert

package

v1.0.1 Latest Latest Go to latest Published: Nov 17, 2019 License: MIT Imports: 17 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func CreateCertificate(cinfo *TBSCertificate, signature []byte) ([]byte, error)

func CreateCertificateRequest(template *x509.CertificateRequest, pub *sm2.PubKey,
	pri *sm2.PrivKey, userId []byte) (csr []byte, err error)

func FillCertificateTemplateByCSR(template *x509.Certificate, csr *x509.CertificateRequest)

func IssueCertificateBySoftCAKey(cinfo *TBSCertificate, caPri *sm2.PrivKey, userId []byte) ([]byte, error)

func MarshalPKIXPublicKey(pub *sm2.PubKey) ([]byte, error)

MarshalPKIXPublicKey 将公钥序列化成一个 PKIX 的公钥

func ParseCertificate(asn1Data []byte) (*x509.Certificate, error)

ParseCertificate parses a single certificate from the given ASN.1 DER data.

func ParseCertificateRequest(asn1Data []byte) (*x509.CertificateRequest, error)

ParseCertificateRequest parses a single certificate request from the given ASN.1 DER data.

func VerifyCSRSign(csr *x509.CertificateRequest, userId []byte) bool

func VerifyDERCSRSign(asn1Data []byte, userId []byte) (bool, error)

type TBSCertificate tbsCertificate

func CreateCertificateInfo(template, parent *x509.Certificate, csr *x509.CertificateRequest) (*TBSCertificate, error)

CreateCertificateInfo 创建证书信息

为什么要将构建CertificateInfo和签发证书分开呢? 是因为实际应用中的CA密钥大多数都是放在加密卡/加密机中的，签名由加密卡/加密机来完成