Documentation
¶
Index ¶
- Constants
- func ValidateDTS(ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, ...) error
- func ValidatePKCS7Signatures(ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, ...) error
- func ValidateX509RSASHA1Signature(ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, ...) error
- type AlgorithmIdentifier
- type OtherRevInfo
- type RevocationInfoArchival
- type TSTInfo
Constants ¶
const (
// CertifiedSigPermsNotSupported reports unsupported certified signature permission validation.
CertifiedSigPermsNotSupported = "Certified signature detected. Permission validation not supported."
)
Variables ¶
This section is empty.
Functions ¶
func ValidateDTS ¶
func ValidateDTS( ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, validateAll bool, perms int, rootCerts *x509.CertPool, result *model.SignatureValidationResult, ctx *model.Context, ) error
ValidateDTS reports observed signature, certificate, timestamp and revocation evidence together with a local assessment for an ETSI.RFC3161 document timestamp.
func ValidatePKCS7Signatures ¶
func ValidatePKCS7Signatures( ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, validateAll bool, perms int, rootCerts *x509.CertPool, result *model.SignatureValidationResult, ctx *model.Context, ) error
ValidatePKCS7Signatures reports observed signature, certificate, timestamp and revocation evidence together with a local assessment for supported PKCS#7 SubFilters.
func ValidateX509RSASHA1Signature ¶
func ValidateX509RSASHA1Signature( ra io.ReaderAt, sigDict types.Dict, certified bool, authoritative bool, validateAll bool, perms int, rootCerts *x509.CertPool, result *model.SignatureValidationResult, ctx *model.Context, ) error
ValidateX509RSASHA1Signature reports observed signature, certificate, timestamp and revocation evidence together with a local assessment for SubFilter adbe.x509.rsa_sha1.
Types ¶
type AlgorithmIdentifier ¶
type AlgorithmIdentifier struct {
Algorithm asn1.ObjectIdentifier
Parameters asn1.RawValue `asn1:"tag:0,optional"`
}
AlgorithmIdentifier represents an RFC 3161 message-imprint algorithm.
type OtherRevInfo ¶
type OtherRevInfo struct {
Type asn1.ObjectIdentifier
Value []byte
}
OtherRevInfo represents an additional revocation-information value in a RevocationInfoArchival attribute.
type RevocationInfoArchival ¶
type RevocationInfoArchival struct {
CRLs []asn1.RawValue `asn1:"optional,explicit,tag:0"` // [0] EXPLICIT SEQUENCE of CRLs, OPTIONAL RFC 5280
OCSPs []asn1.RawValue `asn1:"optional,explicit,tag:1"` // [1] EXPLICIT SEQUENCE of OCSPResponse, OPTIONAL RFC 6960
OtherRevInfo []OtherRevInfo `asn1:"optional,explicit,tag:2"` // [2] EXPLICIT SEQUENCE of OtherRevInfo, OPTIONAL
}
RevocationInfoArchival represents embedded CRL, OCSP and other revocation information carried by an Adobe revocationInfoArchival attribute.
type TSTInfo ¶
type TSTInfo struct {
Version int
Policy asn1.ObjectIdentifier
MessageImprint struct {
HashAlgorithm AlgorithmIdentifier
HashedMessage []byte
}
SerialNumber asn1.RawValue
GenTime time.Time
Accuracy asn1.RawValue `asn1:"optional"`
Ordering bool `asn1:"optional"`
Nonce asn1.RawValue `asn1:"optional"`
TSA asn1.RawValue `asn1:"optional"`
Extensions asn1.RawValue `asn1:"optional"`
}
TSTInfo represents the RFC 3161 timestamp token information.
Source Files