didx509

var (

	// SubjectPolicySerialNumber represents the serial number attribute in the subject field of an X.509 certificate.
	SubjectPolicySerialNumber = PolicyKey{
								// contains filtered or unexported fields
	}

	// SubjectPolicyCommonName represents a policy key for the Common Name (CN) attribute in the subject of an X.509 certificate.
	SubjectPolicyCommonName = PolicyKey{
							// contains filtered or unexported fields
	}

	// SubjectPolicyLocality represents the policy key for the subject's locality attribute in an X.509 certificate.
	SubjectPolicyLocality = PolicyKey{
							// contains filtered or unexported fields
	}

	// SubjectPolicyCountry defines the policy key for the country attribute of the subject in an X.509 certificate.
	SubjectPolicyCountry = PolicyKey{
							// contains filtered or unexported fields
	}

	// SubjectPolicyOrganization represents the policy key for the 'Organization' attribute in the subject of an X.509 certificate.
	SubjectPolicyOrganization = PolicyKey{
								// contains filtered or unexported fields
	}

	// SubjectPolicyOrganizationalUnit represents the policy key for the organizational unit (OU) attribute of the subject
	SubjectPolicyOrganizationalUnit = PolicyKey{
									// contains filtered or unexported fields
	}

	// SubjectPolicyState represents the state or province attribute in the subject of an X.509 certificate.
	SubjectPolicyState = PolicyKey{
						// contains filtered or unexported fields
	}

	// SubjectPolicyStreet is a PolicyKey for the 'streetAddress' attribute in the subject of an X.509 certificate.
	SubjectPolicyStreet = PolicyKey{
						// contains filtered or unexported fields
	}
)

var (

	// SanPolicyOtherName represents a policy key for the "otherName" attribute within the Subject Alternative Name (SAN) policy.
	SanPolicyOtherName = PolicyKey{
						// contains filtered or unexported fields
	}

	// SanPolicyDNS represents a policy key for the 'dns' attribute in the Subject Alternative Name (SAN) extension of an X.509 certificate.
	SanPolicyDNS = PolicyKey{
					// contains filtered or unexported fields
	}

	// SanPolicyEmail is a PolicyKey for validating the email attribute within the Subject Alternative Name (SAN) of a certificate.
	SanPolicyEmail = PolicyKey{
					// contains filtered or unexported fields
	}

	// SanPolicyIPAddress represents a policy key for IP address in Subject Alternative Name (SAN) validation.
	SanPolicyIPAddress = PolicyKey{
						// contains filtered or unexported fields
	}
)

var (

	// ErrDidMalformed indicates that the DID (Decentralized Identifier) is malformed and does not adhere to the expected format.
	ErrDidMalformed = errors.New("did:x509 is malformed")

	// ErrDidVersion indicates that the DID:x509 does not have version 0.
	ErrDidVersion = errors.New("did:x509 does not have version 0")

	// ErrDidPolicyMalformed indicates that the did:x509 policy is malformed.
	ErrDidPolicyMalformed = errors.New("did:x509 policy is malformed")

	// ErrUnkPolicyType indicates that the encountered policy type is unknown or unsupported.
	ErrUnkPolicyType = errors.New("unknown policy type")
)

var (

	// ErrUnsupportedHashAlgorithm indicates that the provided hash algorithm is not supported by the system.
	ErrUnsupportedHashAlgorithm = fmt.Errorf("unsupported hash algorithm")

	// ErrInvalidHash indicates that the provided hash is invalid or improperly formatted.
	ErrInvalidHash = fmt.Errorf("invalid hash")

	// ErrCertificateNotfound indicates that a certificate could not be found with the given hash.
	ErrCertificateNotfound = fmt.Errorf("cannot find a certificate with the given hash")

	// ErrTrailingData indicates that there is trailing data after an X.509 extension, which should not be present.
	ErrTrailingData = errors.New("x509: trailing data after X.509 extension")

	// ErrSanSequenceData indicates an unexpected sequence in the Subject Alternative Name (SAN) extension.
	ErrSanSequenceData = errors.New("unexpected SAN sequence")
)

var (
	// SubjectAlternativeNameType defines the OID for Subject Alternative Name
	SubjectAlternativeNameType = asn1.ObjectIdentifier{2, 5, 29, 17}
	// OtherNameType defines the OID for Other Name
	OtherNameType = asn1.ObjectIdentifier{2, 5, 5, 5}
)

var (

	// ErrX509ChainMissing indicates that no x5c header was found in the provided metadata.
	ErrX509ChainMissing = errors.New("no x5c header found")
)