Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

crypto

package

Go to main page

Versions in this module

v0

v0.3.1

Feb 13, 2026

Changes in this version

+ func GenerateAdminClientCert(clusterName string, caCert *x509.Certificate, caKey ed25519.PrivateKey) (certPEM, keyPEM []byte, err error)

+ func RegenerateAdminClientCert(clusterName string, caCertPEM, caKeyPEM []byte) (certPEM, keyPEM []byte, err error)

type TrustdCredentials

+ AdminCert []byte

+ AdminKey []byte

v0.3.0

Feb 12, 2026

Changes in this version

+ func ParseTrustdServerCertSANs(certPEM []byte) ([]net.IP, []string, error)

+ func RegenerateTrustdServerCert(caCertPEM, caKeyPEM []byte, ipAddresses []net.IP, dnsNames []string) (serverChain, serverKey []byte, err error)

+ type TrustdCredentials struct

+ OSCACert []byte

+ OSCAKey []byte

+ ServerChain []byte

+ ServerKey []byte

+ Token string

+ func GenerateTrustdCredentials(clusterName string, ipAddresses []net.IP, dnsNames []string) (*TrustdCredentials, error)

v0.2.2

Feb 11, 2026

v0.2.1

Feb 9, 2026

v0.2.0

Feb 9, 2026

Changes in this version

+ func CheckCertificateAndPrivateKeyPairValidity(certificate, privateKey []byte, threshold time.Duration) (bool, error)

+ func CheckCertificateNamesAndIPs(certificateBytes []byte, entries []string) (bool, error)

+ func CheckPublicAndPrivateKeyValidity(publicKey, privateKey []byte) (bool, error)

+ func GenerateCertificatePrivateKeyPair(template *x509.Certificate, caCertificate []byte, caPrivateKey []byte) (*bytes.Buffer, *bytes.Buffer, error)

+ func IsValidCertificateKeyPairBytes(certificateBytes, privateKeyBytes []byte, expirationThreshold time.Duration) (bool, error)

+ func NewCertificateTemplate(commonName string) *x509.Certificate

+ func NewCertificateTemplateWithSANs(commonName string, dnsNames []string, ipAddresses []net.IP) *x509.Certificate

+ func ParseCertificateBytes(content []byte) (*x509.Certificate, error)

+ func ParsePrivateKeyBytes(content []byte) (crypto.Signer, error)

+ func ParsePublicKeyBytes(content []byte) (*rsa.PublicKey, error)

+ func VerifyCertificate(cert, ca []byte, usages ...x509.ExtKeyUsage) (bool, error)

v0.1.0-tcp-proxy

Feb 5, 2026

v0.1.0-alpha

Jan 21, 2026