type crypto/x509.Certificate
98 uses
crypto/x509 (current package)
cert_pool.go#L50: constraint func([]*Certificate) error
cert_pool.go#L60: getCert func() (*Certificate, error)
cert_pool.go#L81: func (s *CertPool) cert(n int) (*Certificate, func([]*Certificate) error, error) {
cert_pool.go#L126: cert *Certificate
cert_pool.go#L127: constraint func([]*Certificate) error
cert_pool.go#L132: func (s *CertPool) findPotentialParents(cert *Certificate) []potentialParent {
cert_pool.go#L172: func (s *CertPool) contains(cert *Certificate) bool {
cert_pool.go#L180: func (s *CertPool) AddCert(cert *Certificate) {
cert_pool.go#L184: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
cert_pool.go#L194: func (s *CertPool) addCertFunc(rawSum224 sum224, rawSubject string, getCert func() (*Certificate, error), constraint func([]*Certificate) error) {
cert_pool.go#L237: v *Certificate
cert_pool.go#L239: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
cert_pool.go#L287: func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error) {
cert_pool.go#L291: s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
parser.go#L509: func parseNameConstraintsExtension(out *Certificate, e pkix.Extension) (unhandled bool, err error) {
parser.go#L669: func processExtensions(out *Certificate) error {
parser.go#L883: func parseCertificate(der []byte) (*Certificate, error) {
parser.go#L884: cert := &Certificate{}
parser.go#L1073: func ParseCertificate(der []byte) (*Certificate, error) {
parser.go#L1086: func ParseCertificates(der []byte) ([]*Certificate, error) {
parser.go#L1087: var certs []*Certificate
root_unix.go#L28: func (c *Certificate) systemVerify(opts *VerifyOptions) (chains [][]*Certificate, err error) {
verify.go#L69: Cert *Certificate
verify.go#L107: Certificate *Certificate
verify.go#L142: Cert *Certificate
verify.go#L148: hintCert *Certificate
verify.go#L540: func (c *Certificate) checkNameConstraints(count *int,
verify.go#L597: func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *VerifyOptions) error {
verify.go#L641: toCheck := []*Certificate{}
verify.go#L780: func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error) {
verify.go#L834: var candidateChains [][]*Certificate
verify.go#L836: candidateChains = [][]*Certificate{{c}}
verify.go#L838: candidateChains, err = c.buildChains([]*Certificate{c}, nil, &opts)
verify.go#L844: chains = make([][]*Certificate, 0, len(candidateChains))
verify.go#L901: func appendToFreshChain(chain []*Certificate, cert *Certificate) []*Certificate {
verify.go#L902: n := make([]*Certificate, len(chain)+1)
verify.go#L913: func alreadyInChain(candidate *Certificate, chain []*Certificate) bool {
verify.go#L958: func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, opts *VerifyOptions) (chains [][]*Certificate, err error) {
verify.go#L961: hintCert *Certificate
verify.go#L1009: var childChains [][]*Certificate
verify.go#L1162: func (c *Certificate) VerifyHostname(h string) error {
verify.go#L1202: func checkChainForKeyUsage(chain []*Certificate, keyUsages []ExtKeyUsage) bool {
verify.go#L1401: func policiesValid(chain []*Certificate, opts VerifyOptions) bool {
x509.go#L687: type Certificate struct {
x509.go#L896: func (c *Certificate) Equal(other *Certificate) bool {
x509.go#L903: func (c *Certificate) hasSANExtension() bool {
x509.go#L911: func (c *Certificate) CheckSignatureFrom(parent *Certificate) error {
x509.go#L940: func (c *Certificate) CheckSignature(algo SignatureAlgorithm, signed, signature []byte) error {
x509.go#L944: func (c *Certificate) hasNameConstraints() bool {
x509.go#L948: func (c *Certificate) getSANExtension() []byte {
x509.go#L1030: func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) error {
x509.go#L1182: func buildCertExtensions(template *Certificate, subjectIsEmpty bool, authorityKeyId []byte, subjectKeyId []byte) (ret []pkix.Extension, err error) {
x509.go#L1506: func subjectBytes(cert *Certificate) ([]byte, error) {
x509.go#L1668: func CreateCertificate(rand io.Reader, template, parent *Certificate, pub, priv any) ([]byte, error) {
x509.go#L1834: func (c *Certificate) CreateCRL(rand io.Reader, priv any, revokedCerts []pkix.RevokedCertificate, now, expiry time.Time) (crlBytes []byte, err error) {
x509.go#L2395: func CreateRevocationList(rand io.Reader, template *RevocationList, issuer *Certificate, priv crypto.Signer) ([]byte, error) {
x509.go#L2545: func (rl *RevocationList) CheckSignatureFrom(parent *Certificate) error {
crypto/tls
cache.go#L16: cert *x509.Certificate
cache.go#L48: cert *x509.Certificate
common.go#L271: PeerCertificates []*x509.Certificate
common.go#L282: VerifiedChains [][]*x509.Certificate
common.go#L638: VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
common.go#L1547: Leaf *x509.Certificate
common.go#L1552: func (c *Certificate) leaf() (*x509.Certificate, error) {
common.go#L1680: UnverifiedCertificates []*x509.Certificate
common.go#L1698: func fipsAllowedChains(chains [][]*x509.Certificate) ([][]*x509.Certificate, error) {
common.go#L1703: permittedChains := make([][]*x509.Certificate, 0, len(chains))
common.go#L1717: func fipsAllowChain(chain []*x509.Certificate) bool {
common.go#L1731: func fipsAllowCert(c *x509.Certificate) bool {
conn.go#L56: peerCertificates []*x509.Certificate
conn.go#L62: verifiedChains [][]*x509.Certificate
handshake_client.go#L1086: certs := make([]*x509.Certificate, len(certificates))
handshake_server.go#L900: certs := make([]*x509.Certificate, len(certificates))
key_agreement.go#L34: processServerKeyExchange(*Config, *clientHelloMsg, *serverHelloMsg, *x509.Certificate, *serverKeyExchangeMsg) error
key_agreement.go#L35: generateClientKeyExchange(*Config, *clientHelloMsg, *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error)
key_agreement.go#L77: func (ka rsaKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
key_agreement.go#L81: func (ka rsaKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
key_agreement.go#L275: func (ka *ecdheKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
key_agreement.go#L360: func (ka *ecdheKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
ticket.go#L89: peerCertificates []*x509.Certificate
ticket.go#L93: verifiedChains [][]*x509.Certificate
ticket.go#L173: func certificatesToBytesSlice(certs []*x509.Certificate) [][]byte {
ticket.go#L243: var chain []*x509.Certificate
google.golang.org/grpc/internal/credentials
spiffe.go#L45: func SPIFFEIDFromCert(cert *x509.Certificate) *url.URL {