type crypto/x509.Certificate
103 uses
crypto/x509 (current package)
cert_pool.go#L50: constraint func([]*Certificate) error
cert_pool.go#L60: getCert func() (*Certificate, error)
cert_pool.go#L81: func (s *CertPool) cert(n int) (*Certificate, func([]*Certificate) error, error) {
cert_pool.go#L130: cert *Certificate
cert_pool.go#L131: constraint func([]*Certificate) error
cert_pool.go#L136: func (s *CertPool) findPotentialParents(cert *Certificate) []potentialParent {
cert_pool.go#L176: func (s *CertPool) contains(cert *Certificate) bool {
cert_pool.go#L184: func (s *CertPool) AddCert(cert *Certificate) {
cert_pool.go#L188: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
cert_pool.go#L198: func (s *CertPool) addCertFunc(rawSum224 sum224, rawSubject string, getCert func() (*Certificate, error), constraint func([]*Certificate) error) {
cert_pool.go#L241: v *Certificate
cert_pool.go#L243: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
cert_pool.go#L291: func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error) {
cert_pool.go#L295: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
constraints.go#L515: func checkChainConstraints(chain []*Certificate) error {
parser.go#L607: func parseNameConstraintsExtension(out *Certificate, e pkix.Extension) (unhandled bool, err error) {
parser.go#L750: func processExtensions(out *Certificate) error {
parser.go#L964: func parseCertificate(der []byte) (*Certificate, error) {
parser.go#L965: cert := &Certificate{}
parser.go#L1158: func ParseCertificate(der []byte) (*Certificate, error) {
parser.go#L1171: func ParseCertificates(der []byte) ([]*Certificate, error) {
parser.go#L1172: var certs []*Certificate
root_unix.go#L9: func (c *Certificate) systemVerify(opts *VerifyOptions) (chains [][]*Certificate, err error) {
verify.go#L70: Cert *Certificate
verify.go#L108: Certificate *Certificate
verify.go#L150: Cert *Certificate
verify.go#L156: hintCert *Certificate
verify.go#L451: func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *VerifyOptions) error {
verify.go#L550: func (c *Certificate) Verify(opts VerifyOptions) ([][]*Certificate, error) {
verify.go#L604: var candidateChains [][]*Certificate
verify.go#L606: candidateChains = [][]*Certificate{{c}}
verify.go#L608: candidateChains, err = c.buildChains([]*Certificate{c}, nil, &opts)
verify.go#L630: candidateChains = slices.DeleteFunc(candidateChains, func(chain []*Certificate) bool {
verify.go#L674: func appendToFreshChain(chain []*Certificate, cert *Certificate) []*Certificate {
verify.go#L675: n := make([]*Certificate, len(chain)+1)
verify.go#L686: func alreadyInChain(candidate *Certificate, chain []*Certificate) bool {
verify.go#L736: func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, opts *VerifyOptions) (chains [][]*Certificate, err error) {
verify.go#L739: hintCert *Certificate
verify.go#L787: var childChains [][]*Certificate
verify.go#L947: func (c *Certificate) VerifyHostname(h string) error {
verify.go#L994: func checkChainForKeyUsage(chain []*Certificate, keyUsages []ExtKeyUsage) bool {
verify.go#L1193: func policiesValid(chain []*Certificate, opts VerifyOptions) bool {
verify.go#L1430: func containsDistrustedSPKIHash(chain []*Certificate) bool {
x509.go#L774: type Certificate struct {
x509.go#L984: func (c *Certificate) Equal(other *Certificate) bool {
x509.go#L991: func (c *Certificate) hasSANExtension() bool {
x509.go#L999: func (c *Certificate) CheckSignatureFrom(parent *Certificate) error {
x509.go#L1028: func (c *Certificate) CheckSignature(algo SignatureAlgorithm, signed, signature []byte) error {
x509.go#L1032: func (c *Certificate) hasNameConstraints() bool {
x509.go#L1036: func (c *Certificate) getSANExtension() []byte {
x509.go#L1146: func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) error {
x509.go#L1298: func buildCertExtensions(template *Certificate, subjectIsEmpty bool, authorityKeyId []byte, subjectKeyId []byte) (ret []pkix.Extension, err error) {
x509.go#L1631: func subjectBytes(cert *Certificate) ([]byte, error) {
x509.go#L1807: func CreateCertificate(rand io.Reader, template, parent *Certificate, pub, priv any) ([]byte, error) {
x509.go#L1983: func (c *Certificate) CreateCRL(rand io.Reader, priv any, revokedCerts []pkix.RevokedCertificate, now, expiry time.Time) (crlBytes []byte, err error) {
x509.go#L2556: func CreateRevocationList(rand io.Reader, template *RevocationList, issuer *Certificate, priv crypto.Signer) ([]byte, error) {
x509.go#L2706: func (rl *RevocationList) CheckSignatureFrom(parent *Certificate) error {
crypto/tls
cache.go#L19: func (wcc *weakCertCache) newCert(der []byte) (*x509.Certificate, error) {
cache.go#L21: if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {
cache.go#L34: } else if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {
common.go#L293: PeerCertificates []*x509.Certificate
common.go#L304: VerifiedChains [][]*x509.Certificate
common.go#L681: VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
common.go#L1658: Leaf *x509.Certificate
common.go#L1663: func (c *Certificate) leaf() (*x509.Certificate, error) {
common.go#L1859: UnverifiedCertificates []*x509.Certificate
common.go#L1877: func fipsAllowedChains(chains [][]*x509.Certificate) ([][]*x509.Certificate, error) {
common.go#L1882: permittedChains := make([][]*x509.Certificate, 0, len(chains))
common.go#L1896: func fipsAllowChain(chain []*x509.Certificate) bool {
common.go#L1914: func anyValidVerifiedChain(verifiedChains [][]*x509.Certificate, opts x509.VerifyOptions) bool {
common.go#L1919: if slices.ContainsFunc(chain, func(cert *x509.Certificate) bool {
conn.go#L56: peerCertificates []*x509.Certificate
conn.go#L60: verifiedChains [][]*x509.Certificate
defaults_fips140.go#L73: func isCertificateAllowedFIPS(c *x509.Certificate) bool {
handshake_client.go#L1106: certs := make([]*x509.Certificate, len(certificates))
handshake_server.go#L945: certs := make([]*x509.Certificate, len(certificates))
key_agreement.go#L35: processServerKeyExchange(*Config, *clientHelloMsg, *serverHelloMsg, *x509.Certificate, *serverKeyExchangeMsg) error
key_agreement.go#L36: generateClientKeyExchange(*Config, *clientHelloMsg, *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error)
key_agreement.go#L78: func (ka rsaKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
key_agreement.go#L82: func (ka rsaKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
key_agreement.go#L271: func (ka *ecdheKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
key_agreement.go#L375: func (ka *ecdheKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
ticket.go#L90: peerCertificates []*x509.Certificate
ticket.go#L93: verifiedChains [][]*x509.Certificate
ticket.go#L178: func certificatesToBytesSlice(certs []*x509.Certificate) [][]byte {
ticket.go#L257: var chain []*x509.Certificate
github.com/jackc/pgx/v5/pgconn
config.go#L861: tlsConfig.VerifyPeerCertificate = func(certificates [][]byte, _ [][]*x509.Certificate) error {
config.go#L862: certs := make([]*x509.Certificate, len(certificates))
google.golang.org/grpc/internal/credentials
spiffe.go#L45: func SPIFFEIDFromCert(cert *x509.Certificate) *url.URL {