Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

certstore

package

Go to main page

Versions in this module

v0

v0.7.6

Feb 16, 2026

v0.7.5

Feb 16, 2026

v0.7.4

Feb 15, 2026

v0.7.3

Feb 15, 2026

v0.7.2

Feb 15, 2026

v0.7.1

Feb 15, 2026

v0.7.0

Feb 15, 2026

Changes in this version

+ func ExportMatchedBundles(ctx context.Context, input ExportMatchedBundleInput) error

+ func FormatCN(cert *x509.Certificate) string

+ func FormatIPAddresses(ips []net.IP) []string

+ func GenerateCSR(leaf *x509.Certificate, keyPEM []byte, subject *CSRSubjectOverride) (csrPEM []byte, csrJSON []byte, err error)

+ func GenerateJSON(bundle *certkit.BundleResult) ([]byte, error)

+ func GenerateYAML(bundle *certkit.BundleResult, keyPEM []byte, keyType string, bitLength int) ([]byte, error)

+ func GetKeyType(cert *x509.Certificate) string

+ func HasBinaryExtension(path string) bool

+ func LoadFromSQLite(store *MemStore, dbPath string) error — darwin/amd64, linux/amd64, windows/amd64

+ func ProcessData(input ProcessInput) error

+ func ResolveAIA(ctx context.Context, input ResolveAIAInput) []string

+ func SanitizeFileName(name string) string

+ func SaveToSQLite(store *MemStore, dbPath string) error — darwin/amd64, linux/amd64, windows/amd64

+ type AIAFetcher func(ctx context.Context, url string) ([]byte, error)

+ type BundleExportInput struct

+ BitLength int

+ Bundle *certkit.BundleResult

+ CSRSubject *CSRSubjectOverride

+ KeyPEM []byte

+ KeyType string

+ Prefix string

+ SecretName string

+ type BundleFile struct

+ Data []byte

+ Name string

+ Sensitive bool

+ func GenerateBundleFiles(input BundleExportInput) ([]BundleFile, error)

+ type BundleWriter interface

+ WriteBundleFiles func(folder string, files []BundleFile) error

+ type CSRSubjectOverride struct

+ Country []string

+ Locality []string

+ Organization []string

+ OrganizationalUnit []string

+ Province []string

+ type CertHandler interface

+ HandleCertificate func(cert *x509.Certificate, source string) error

+ HandleKey func(key any, pemData []byte, source string) error

+ type CertRecord struct

+ BundleName string

+ Cert *x509.Certificate

+ CertType string

+ KeyType string

+ NotAfter time.Time

+ NotBefore time.Time

+ SKI string

+ Source string

+ type ContainerContents struct

+ ExtraCerts []*x509.Certificate

+ Key crypto.PrivateKey

+ Leaf *x509.Certificate

+ func ParseContainerData(data []byte, passwords []string) (*ContainerContents, error)

+ type ExportMatchedBundleInput struct

+ BundleOpts certkit.BundleOptions

+ CSRSubject *CSRSubjectOverride

+ RetryNoVerify bool

+ SKIs []string

+ Store *MemStore

+ Writer BundleWriter

+ type K8sMetadata struct

+ Annotations map[string]string

+ Name string

+ type K8sSecret struct

+ APIVersion string

+ Data map[string]string

+ Kind string

+ Metadata K8sMetadata

+ Type string

+ type KeyRecord struct

+ BitLength int

+ Key crypto.PrivateKey

+ KeyType string

+ PEM []byte

+ SKI string

+ Source string

+ type MemStore struct

+ func NewMemStore() *MemStore

+ func (s *MemStore) AllCerts() map[string]*CertRecord

+ func (s *MemStore) AllCertsFlat() []*CertRecord

+ func (s *MemStore) AllKeys() map[string]*KeyRecord

+ func (s *MemStore) AllKeysFlat() []*KeyRecord

+ func (s *MemStore) BundleNames() []string

+ func (s *MemStore) CertsByBundleName(name string) []*CertRecord

+ func (s *MemStore) DumpDebug()

+ func (s *MemStore) GetCert(ski string) *CertRecord

+ func (s *MemStore) GetKey(ski string) *KeyRecord

+ func (s *MemStore) HandleCertificate(cert *x509.Certificate, source string) error

+ func (s *MemStore) HandleKey(key any, pemData []byte, source string) error

+ func (s *MemStore) HasIssuer(cert *x509.Certificate) bool

+ func (s *MemStore) IntermediatePool() *x509.CertPool

+ func (s *MemStore) Intermediates() []*x509.Certificate

+ func (s *MemStore) MatchedPairs() []string

+ func (s *MemStore) Reset()

+ func (s *MemStore) ScanSummary() ScanSummary

+ func (s *MemStore) SetBundleName(ski, name string)

+ type ProcessInput struct

+ Data []byte

+ Handler CertHandler

+ Passwords []string

+ Path string

+ type ResolveAIAInput struct

+ Fetch AIAFetcher

+ MaxDepth int

+ Store *MemStore

+ type ScanSummary struct

+ Intermediates int

+ Keys int

+ Leaves int

+ Matched int

+ Roots int