x509/pkix

3 分钟阅读

原文：https://pkg.go.dev/crypto/x509/pkix@go1.23.0

Package pkix contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.

pkix 包包含用于 ASN.1 解析和 X.509 证书、CRL 和 OCSP 序列化的共享低级结构。

常量

This section is empty.

变量

This section is empty.

函数

This section is empty.

类型

type AlgorithmIdentifier

1
2
3
4
type AlgorithmIdentifier struct {
	Algorithm  asn1.ObjectIdentifier
	Parameters asn1.RawValue `asn1:"optional"`
}

AlgorithmIdentifier represents the ASN.1 structure of the same name. See RFC 5280, section 4.1.1.2.

AlgorithmIdentifier 表示同名 ASN.1 结构。请参阅 RFC 5280 第 4.1.1.2 节。

type AttributeTypeAndValue

1
2
3
4
type AttributeTypeAndValue struct {
	Type  asn1.ObjectIdentifier
	Value any
}

AttributeTypeAndValue mirrors the ASN.1 structure of the same name in RFC 5280, Section 4.1.2.4.

AttributeTypeAndValue 镜像 RFC 5280 第 4.1.2.4 节中同名的 ASN.1 结构。

type AttributeTypeAndValueSET <- go1.3

1
2
3
4
type AttributeTypeAndValueSET struct {
	Type  asn1.ObjectIdentifier
	Value [][]AttributeTypeAndValue `asn1:"set"`
}

AttributeTypeAndValueSET represents a set of ASN.1 sequences of AttributeTypeAndValue sequences from RFC 2986 (PKCS #10).

AttributeTypeAndValueSET 表示来自 RFC 2986 (PKCS #10) 的 AttributeTypeAndValue 序列的 ASN.1 序列集。

type CertificateList <- DEPRECATED

1
2
3
4
5
type CertificateList struct {
	TBSCertList        TBSCertificateList
	SignatureAlgorithm AlgorithmIdentifier
	SignatureValue     asn1.BitString
}

CertificateList represents the ASN.1 structure of the same name. See RFC 5280, section 5.1. Use Certificate.CheckCRLSignature to verify the signature.

CertificateList 表示同名的 ASN.1 结构。请参阅 RFC 5280 第 5.1 节。使用 Certificate.CheckCRLSignature 验证签名。

Deprecated: x509.RevocationList should be used instead.

已弃用：应改用 x509.RevocationList。

(*CertificateList) HasExpired

1
func (certList *CertificateList) HasExpired(now time.Time) bool

HasExpired reports whether certList should have been updated by now.

HasExpired 报告 certList 是否应该已经更新。

type Extension

1
2
3
4
5
type Extension struct {
	Id       asn1.ObjectIdentifier
	Critical bool `asn1:"optional"`
	Value    []byte
}

Extension represents the ASN.1 structure of the same name. See RFC 5280, section 4.2.

Extension 表示同名的 ASN.1 结构。请参阅 RFC 5280 第 4.2 节。

type Name

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
type Name struct {
	Country, Organization, OrganizationalUnit []string
	Locality, Province                        []string
	StreetAddress, PostalCode                 []string
	SerialNumber, CommonName                  string

	// Names contains all parsed attributes. When parsing distinguished names,
	// this can be used to extract non-standard attributes that are not parsed
	// by this package. When marshaling to RDNSequences, the Names field is
	// ignored, see ExtraNames.
	Names []AttributeTypeAndValue

	// ExtraNames contains attributes to be copied, raw, into any marshaled
	// distinguished names. Values override any attributes with the same OID.
	// The ExtraNames field is not populated when parsing, see Names.
	ExtraNames []AttributeTypeAndValue
}

Name represents an X.509 distinguished name. This only includes the common elements of a DN. Note that Name is only an approximation of the X.509 structure. If an accurate representation is needed, asn1.Unmarshal the raw subject or issuer as an RDNSequence.

Name 表示 X.509 专有名称。这仅包括 DN 的常见元素。请注意，Name 只是 X.509 结构的近似值。如果需要准确的表示，请将原始主题或颁发者作为 RDNSequence 进行 asn1.Unmarshal。

(*Name) FillFromRDNSequence

1
func (n *Name) FillFromRDNSequence(rdns *RDNSequence)

FillFromRDNSequence populates n from the provided RDNSequence. Multi-entry RDNs are flattened, all entries are added to the relevant n fields, and the grouping is not preserved.

FillFromRDNSequence 从提供的 RDNSequence 填充 n。多条目 RDN 被展平，所有条目都被添加到相关的 n 字段，并且不保留分组。

(Name) String <- go1.10

1
func (n Name) String() string

String returns the string form of n, roughly following the RFC 2253 Distinguished Names syntax.

String 返回 n 的字符串形式，大致遵循 RFC 2253 专有名称语法。

(Name) ToRDNSequence

1
func (n Name) ToRDNSequence() (ret RDNSequence)

ToRDNSequence converts n into a single RDNSequence. The following attributes are encoded as multi-value RDNs:

ToRDNSequence 将 n 转换为单个 RDNSequence。以下属性被编码为多值 RDN：

Country 国家/地区
Organization 组织
OrganizationalUnit 组织单位
Locality 地区
Province 省份
StreetAddress 街道地址
PostalCode 邮政编码

Each ExtraNames entry is encoded as an individual RDN.

每个 ExtraNames 条目都编码为一个单独的 RDN。

type RDNSequence

1
type RDNSequence []RelativeDistinguishedNameSET

(RDNSequence) String <- go1.10

1
func (r RDNSequence) String() string

String returns a string representation of the sequence r, roughly following the RFC 2253 Distinguished Names syntax.

String 返回序列 r 的字符串表示形式，大致遵循 RFC 2253 识别名称语法。

type RelativeDistinguishedNameSET

1
type RelativeDistinguishedNameSET []AttributeTypeAndValue

type RevokedCertificate

1
2
3
4
5
type RevokedCertificate struct {
	SerialNumber   *big.Int
	RevocationTime time.Time
	Extensions     []Extension `asn1:"optional"`
}

RevokedCertificate represents the ASN.1 structure of the same name. See RFC 5280, section 5.1.

RevokedCertificate 表示同名的 ASN.1 结构。请参阅 RFC 5280 第 5.1 节。

type TBSCertificateList <-DEPRECATED

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
type TBSCertificateList struct {
	Raw                 asn1.RawContent
	Version             int `asn1:"optional,default:0"`
	Signature           AlgorithmIdentifier
	Issuer              RDNSequence
	ThisUpdate          time.Time
	NextUpdate          time.Time            `asn1:"optional"`
	RevokedCertificates []RevokedCertificate `asn1:"optional"`
	Extensions          []Extension          `asn1:"tag:0,optional,explicit"`
}

TBSCertificateList represents the ASN.1 structure of the same name. See RFC 5280, section 5.1.

TBSCertificateList 表示同名的 ASN.1 结构。请参阅 RFC 5280 第 5.1 节。

Deprecated: x509.RevocationList should be used instead.

已弃用：应改用 x509.RevocationList。

最后修改 October 10, 2024: 更新 (a4b8f85)