x509

package

v0.5.4 Latest Latest Go to latest Published: Feb 5, 2024 License: Apache-2.0 Imports: 15 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/sigstore/k8s-manifest-sigstore

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func GetNameInfoFromX509Cert(cert *x509.Certificate) string
func GetPublicKeyFromCertificate(certPemBytes []byte) ([]byte, error)
func LoadCertificate(certPath string) (*x509.Certificate, error)
func LoadCertificateChain(certChainPath string) ([]*x509.Certificate, error)
func PEMDecode(pemBytes []byte, mode string) []byte
func VerifyBlob(msgBytes, sigBytes, certBytes []byte, caCertPathString *string) (bool, string, *int64, error)

Constants ¶

View Source

const (
	PEMTypePrivateKey  string = "RSA PRIVATE KEY"
	PEMTypePublicKey   string = "PUBLIC KEY"
	PEMTypeCertificate string = "CERTIFICATE"
)

Variables ¶

This section is empty.

Functions ¶

func GetNameInfoFromX509Cert ¶

func GetNameInfoFromX509Cert(cert *x509.Certificate) string

get signer name info from cert try finding it in the following order - cert.EmailAddress - cert.Subject.Names[] - cert.Subject.CommonName - SubjectAlternativeName (SAN) in cert.Extensions[]

func GetPublicKeyFromCertificate ¶

func GetPublicKeyFromCertificate(certPemBytes []byte) ([]byte, error)

extract public key of certificate

func LoadCertificate ¶

func LoadCertificate(certPath string) (*x509.Certificate, error)

Load certificate at `certPath` Specifying a cert secret with `k8s://` prefix is supported.

func LoadCertificateChain ¶ added in v0.4.0

func LoadCertificateChain(certChainPath string) ([]*x509.Certificate, error)

Load certificate chain at `certChainPath` Specifying a cert secret with `k8s://` prefix is supported.

func PEMDecode ¶

func PEMDecode(pemBytes []byte, mode string) []byte

Decode PEM bytes of x509 private key / public key / certificate

func VerifyBlob ¶

func VerifyBlob(msgBytes, sigBytes, certBytes []byte, caCertPathString *string) (bool, string, *int64, error)

Verify certificate with CA cert, then verify signature

Types ¶

This section is empty.

Source Files ¶

View all Source files

x509.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL