Versions in this module Expand all Collapse all v6 v6.2.13 Sep 22, 2026 v6.2.12 Sep 21, 2026 Changes in this version + var ErrCRLExpired = errors.New("crl has expired") + var ErrCRLMissing = errors.New("crl is missing") + var ErrCertBanned = errors.New("certificate is banned") + var ErrCertRevoked = errors.New("certificate is revoked") + var ErrDenylistMissing = errors.New("denylist cannot be retrieved") + var ErrUnknownIssuer = errors.New("unknown certificate issuer") + func FlagSet() *pflag.FlagSet + func SetNewDenylistWithCert(t *testing.T, val Validator, cert *x509.Certificate) + type Config struct + Denylist DenylistConfig + MaxUpdateFailHours int + Softfail bool + func DefaultConfig() Config + func TestConfig(t *testing.T) Config + type Denylist interface + LastUpdated func() time.Time + Subscribe func(f func()) + URL func() string + Update func() error + ValidateCert func(cert *x509.Certificate) error + func NewDenylist(config DenylistConfig) (Denylist, error) + type DenylistConfig struct + TrustedSigner string + URL string + type MockDenylist struct + func NewMockDenylist(ctrl *gomock.Controller) *MockDenylist + func (m *MockDenylist) EXPECT() *MockDenylistMockRecorder + func (m *MockDenylist) LastUpdated() time.Time + func (m *MockDenylist) Subscribe(f func()) + func (m *MockDenylist) URL() string + func (m *MockDenylist) Update() error + func (m *MockDenylist) ValidateCert(cert *x509.Certificate) error + type MockDenylistMockRecorder struct + func (mr *MockDenylistMockRecorder) LastUpdated() *gomock.Call + func (mr *MockDenylistMockRecorder) Subscribe(f any) *gomock.Call + func (mr *MockDenylistMockRecorder) URL() *gomock.Call + func (mr *MockDenylistMockRecorder) Update() *gomock.Call + func (mr *MockDenylistMockRecorder) ValidateCert(cert any) *gomock.Call + type MockProvider struct + func NewMockProvider(ctrl *gomock.Controller) *MockProvider + func (m *MockProvider) CheckCRL(chain []*x509.Certificate) error + func (m *MockProvider) CheckCRLStrict(chain []*x509.Certificate) error + func (m *MockProvider) CreateTLSConfig(cfg core.TLSConfig) (*tls.Config, error) + func (m *MockProvider) EXPECT() *MockProviderMockRecorder + func (m *MockProvider) SetVerifyPeerCertificateFunc(config *tls.Config) error + func (m *MockProvider) SubscribeDenied(f func()) + type MockProviderMockRecorder struct + func (mr *MockProviderMockRecorder) CheckCRL(chain any) *gomock.Call + func (mr *MockProviderMockRecorder) CheckCRLStrict(chain any) *gomock.Call + func (mr *MockProviderMockRecorder) CreateTLSConfig(cfg any) *gomock.Call + func (mr *MockProviderMockRecorder) SetVerifyPeerCertificateFunc(config any) *gomock.Call + func (mr *MockProviderMockRecorder) SubscribeDenied(f any) *gomock.Call + type MockValidator struct + func NewMockValidator(ctrl *gomock.Controller) *MockValidator + func (m *MockValidator) CheckCRL(chain []*x509.Certificate) error + func (m *MockValidator) CheckCRLStrict(chain []*x509.Certificate) error + func (m *MockValidator) EXPECT() *MockValidatorMockRecorder + func (m *MockValidator) SetVerifyPeerCertificateFunc(config *tls.Config) error + func (m *MockValidator) SubscribeDenied(f func()) + type MockValidatorMockRecorder struct + func (mr *MockValidatorMockRecorder) CheckCRL(chain any) *gomock.Call + func (mr *MockValidatorMockRecorder) CheckCRLStrict(chain any) *gomock.Call + func (mr *MockValidatorMockRecorder) SetVerifyPeerCertificateFunc(config any) *gomock.Call + func (mr *MockValidatorMockRecorder) SubscribeDenied(f any) *gomock.Call + type PKI struct + func New() *PKI + func (p *PKI) CheckHealth() map[string]core.Health + func (p *PKI) Config() any + func (p *PKI) Configure(config core.ServerConfig) error + func (p *PKI) CreateTLSConfig(cfg core.TLSConfig) (*tls.Config, error) + func (p *PKI) Name() string + func (p *PKI) Shutdown() error + func (p *PKI) Start() error + func (v PKI) CheckCRL(chain []*x509.Certificate) error + func (v PKI) CheckCRLStrict(chain []*x509.Certificate) error + func (v PKI) SetVerifyPeerCertificateFunc(config *tls.Config) error + func (v PKI) SubscribeDenied(f func()) + type Provider interface + CreateTLSConfig func(cfg core.TLSConfig) (*tls.Config, error) + type Validator interface + CheckCRL func(chain []*x509.Certificate) error + CheckCRLStrict func(chain []*x509.Certificate) error + SetVerifyPeerCertificateFunc func(config *tls.Config) error + SubscribeDenied func(f func()) Other modules containing this package github.com/nuts-foundation/nuts-node/v5
Go to main page