Affected by GO-2025-4193 and 1 other vulnerabilities

GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio

x509ca

package

v0.2.0 Latest Latest Go to latest Published: Mar 8, 2022 License: Apache-2.0 Imports: 18 Imported by: 0

Details

This section is empty.

This section is empty.

func AdditionalExtensions(subject *challenges.ChallengeResult) []pkix.Extension

func IssuerExtension(issuer string) []pkix.Extension

func MakeX509(subject *challenges.ChallengeResult) (*x509.Certificate, error)

func NewX509CA(params Params) (ca.CertificateAuthority, error)

type Params struct {
	ConfigPath string
	RootID     string
	CAPath     *string
}

type X509CA struct {
	RootCA  *x509.Certificate
	PrivKey crypto.Signer
}

func (x *X509CA) CreateCertificate(_ context.Context, subject *challenges.ChallengeResult) (*ca.CodeSigningCertificate, error)

func (x *X509CA) Root(ctx context.Context) ([]byte, error)