cpcps

package
v0.20260729.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 29, 2026 License: MPL-2.0 Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// GlobalConfigNamespace is the name of the TOML stanza from which
	// IssuingCAConfig is deserialized. It must match the namespace of zlint's
	// lint.Global higher-scoped configuration, which IssuingCAConfig embeds.
	GlobalConfigNamespace = "Global"
	// IssuerCertificateConfigKey configures the Issuing CA's certificate.
	IssuerCertificateConfigKey = "issuer_certificate"
	// ExistingCertificateConfigKey configures the pre-existing certificate of
	// a CA being cross-signed.
	ExistingCertificateConfigKey = "existing_certificate"
)

Keys within the shared configuration stanza. These must match the toml tags on SharedConfig's fields, and are exported so that the linter package can emit configuration using these keys.

Variables

This section is empty.

Functions

func CertNamesCountOutOfBounds added in v0.20260504.0

func CertNamesCountOutOfBounds() lint.CertificateLintInterface

func NewCertValidityNotRound

func NewCertValidityNotRound() lint.CertificateLintInterface

func NewCrlHasIDP

func NewCrlHasIDP() lint.RevocationListLintInterface

func NewCrlHasNoAIA

func NewCrlHasNoAIA() lint.RevocationListLintInterface

func NewCrlHasNoCertIssuers

func NewCrlHasNoCertIssuers() lint.RevocationListLintInterface

func NewCrlIsNotDelta

func NewCrlIsNotDelta() lint.RevocationListLintInterface

func NewRootCACertValidityTooLong

func NewRootCACertValidityTooLong() lint.CertificateLintInterface

func NewSubordinateCACertValidityTooLong

func NewSubordinateCACertValidityTooLong() lint.CertificateLintInterface

func NewSubscriberCertValidityTooLong

func NewSubscriberCertValidityTooLong() lint.CertificateLintInterface

Types

type SharedConfig added in v0.20260729.0

type SharedConfig struct {

	// IssuerCertificatePEM must hold the PEM encoding of the Issuing CA's
	// certificate, so that the profile rows requiring byte-for-byte
	// correspondence with the Issuing CA can be enforced. If it is not
	// configured, the CP/CPS profile lints fail.
	IssuerCertificatePEM string `toml:"issuer_certificate" comment:"The PEM encoding of the Issuing CA's certificate."`
	// ExistingCertificatePEM must hold the PEM encoding of the existing CA
	// Certificate upon which a cross-certificate confers a second issuance
	// path. It is read only by the cross-certified subordinate CA profile
	// lint, and only the ceremony tool ever configures it, because only the
	// ceremony tool issues cross-certificates.
	ExistingCertificatePEM string `toml:"existing_certificate" comment:"The PEM encoding of the existing CA Certificate being cross-signed."`
	// contains filtered or unexported fields
}

SharedConfig is the lint configuration shared by every CP/CPS profile lint. Rather than each lint carrying an identical stanza of its own, all of them declare a pointer to this struct, which zlint fills from the single shared [Global] stanza of the lint configuration.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL