package csr

import "github.com/letsencrypt/boulder/csr"

Index ¶

• func VerifyCSR(csr *x509.CertificateRequest, maxNames int, keyPolicy *goodkey.KeyPolicy, pa core.PolicyAuthority, forceCNFromSAN bool, regID int64) error

Package Files ¶

csr.go

func VerifyCSR ¶ Uses

func VerifyCSR(csr *x509.CertificateRequest, maxNames int, keyPolicy *goodkey.KeyPolicy, pa core.PolicyAuthority, forceCNFromSAN bool, regID int64) error

VerifyCSR checks the validity of a x509.CertificateRequest. Before doing checks it normalizes the CSR which lowers the case of DNS names and subject CN, and if forceCNFromSAN is true it will hoist a DNS name into the CN if it is empty.