rotation

package

v0.3.1 Latest Latest Go to latest Published: Feb 20, 2026 License: MIT Imports: 4 Imported by: 0

Details

Package rotation detects excessive certificate rotation frequencies.

View Source

const (
	MinTrustAnchorDuration  = 365 * 24 * time.Hour // 1 year
	MinIntermediateDuration = 30 * 24 * time.Hour  // 30 days
)

Minimum recommended durations per role.

View Source

const FindingExcessiveRotation = "EXCESSIVE_ROTATION"

FindingExcessiveRotation indicates a certificate with a shorter lifetime than recommended for its role.

This section is empty.

func Check(findings []store.CertFinding) []store.CertFinding

Check analyzes findings for excessive rotation and returns new EXCESSIVE_ROTATION findings.

type CertRole string

CertRole classifies a certificate's role in a trust hierarchy.

const (
	RoleTrustAnchor  CertRole = "trust_anchor"
	RoleIntermediate CertRole = "intermediate_ca"
	RoleLeaf         CertRole = "leaf"
)

Certificate roles in a trust hierarchy.

func DetectRole(f *store.CertFinding) CertRole

DetectRole determines the certificate's role from finding metadata.