Documentation
¶
Index ¶
- Constants
- func CertNamesCountOutOfBounds() lint.CertificateLintInterface
- func NewCertValidityNotRound() lint.CertificateLintInterface
- func NewCrlHasIDP() lint.RevocationListLintInterface
- func NewCrlHasNoAIA() lint.RevocationListLintInterface
- func NewCrlHasNoCertIssuers() lint.RevocationListLintInterface
- func NewCrlIsNotDelta() lint.RevocationListLintInterface
- func NewRootCACertValidityTooLong() lint.CertificateLintInterface
- func NewSubordinateCACertValidityTooLong() lint.CertificateLintInterface
- func NewSubscriberCertValidityTooLong() lint.CertificateLintInterface
- type SharedConfig
Constants ¶
View Source
const ( // GlobalConfigNamespace is the name of the TOML stanza from which // IssuingCAConfig is deserialized. It must match the namespace of zlint's // lint.Global higher-scoped configuration, which IssuingCAConfig embeds. GlobalConfigNamespace = "Global" // IssuerCertificateConfigKey configures the Issuing CA's certificate. IssuerCertificateConfigKey = "issuer_certificate" // ExistingCertificateConfigKey configures the pre-existing certificate of // a CA being cross-signed. ExistingCertificateConfigKey = "existing_certificate" )
Keys within the shared configuration stanza. These must match the toml tags on SharedConfig's fields, and are exported so that the linter package can emit configuration using these keys.
Variables ¶
This section is empty.
Functions ¶
func CertNamesCountOutOfBounds ¶ added in v0.20260504.0
func CertNamesCountOutOfBounds() lint.CertificateLintInterface
func NewCertValidityNotRound ¶
func NewCertValidityNotRound() lint.CertificateLintInterface
func NewCrlHasIDP ¶
func NewCrlHasIDP() lint.RevocationListLintInterface
func NewCrlHasNoAIA ¶
func NewCrlHasNoAIA() lint.RevocationListLintInterface
func NewCrlHasNoCertIssuers ¶
func NewCrlHasNoCertIssuers() lint.RevocationListLintInterface
func NewCrlIsNotDelta ¶
func NewCrlIsNotDelta() lint.RevocationListLintInterface
func NewRootCACertValidityTooLong ¶
func NewRootCACertValidityTooLong() lint.CertificateLintInterface
func NewSubordinateCACertValidityTooLong ¶
func NewSubordinateCACertValidityTooLong() lint.CertificateLintInterface
func NewSubscriberCertValidityTooLong ¶
func NewSubscriberCertValidityTooLong() lint.CertificateLintInterface
Types ¶
type SharedConfig ¶ added in v0.20260729.0
type SharedConfig struct {
// certificate, so that the profile rows requiring byte-for-byte
// correspondence with the Issuing CA can be enforced. If it is not
// configured, the CP/CPS profile lints fail.
IssuerCertificatePEM string `toml:"issuer_certificate" comment:"The PEM encoding of the Issuing CA's certificate."`
// Certificate upon which a cross-certificate confers a second issuance
// path. It is read only by the cross-certified subordinate CA profile
// lint, and only the ceremony tool ever configures it, because only the
// ceremony tool issues cross-certificates.
ExistingCertificatePEM string `toml:"existing_certificate" comment:"The PEM encoding of the existing CA Certificate being cross-signed."`
// contains filtered or unexported fields
}
SharedConfig is the lint configuration shared by every CP/CPS profile lint. Rather than each lint carrying an identical stanza of its own, all of them declare a pointer to this struct, which zlint fills from the single shared [Global] stanza of the lint configuration.
Source Files
¶
- helpers.go
- lint_cert_has_san_count_out_of_bounds.go
- lint_crl_has_idp.go
- lint_crl_has_no_aia.go
- lint_crl_has_no_cert_issuers.go
- lint_crl_is_not_delta.go
- lint_root_ca_cert_validity_period_greater_than_25_years.go
- lint_subordinate_ca_cert_validity_period_greater_than_8_years.go
- lint_subscriber_cert_validity_greater_than_100_days.go
- lint_validity_period_has_extra_second.go
Click to show internal directories.
Click to hide internal directories.