98 Commits

Author	SHA1	Message	Date
Sun Yimin	f3a5d48ed8	properly apply name constrains to roots and intermediates #125	2023-06-01 13:10:54 +08:00
Sun Yimin	fab159f5f0	x509: use the RFC 6125 terminology in the VerifyHostname docs	2023-04-24 09:43:37 +08:00
Sun Yimin	7484123c90	smx509: remove unnecessary !Empty() check	2023-03-31 08:56:24 +08:00
Sun Yimin	6254f0a5cb	sm2: update comments	2023-03-22 10:18:06 +08:00
Sun Yimin	d968b80e5c	Fix sha1 test issue	2023-03-09 13:18:42 +08:00
Sun Yimin	dd8b2f61dd	smx509: ParseTypedECPrivateKey, return real privae key type	2023-02-14 16:03:05 +08:00
Sun Yimin	cf0c739dcf	smx509: change CreateCertificate's template and parent parameter type to any	2023-02-03 10:25:03 +08:00
Sun Yimin	ff2b695500	pkcs8: add example test	2023-02-01 17:28:49 +08:00
Sun Yimin	72bb569234	smx509: clarify that CheckSignatureFrom and CheckSignature are low-level API	2023-01-18 11:07:03 +08:00
Sun Yimin	acf6edec18	smx509: include more hints for verification failure	2022-12-02 08:47:39 +08:00
Sun Yimin	f1993bc41a	sm2,smx509: add encoding paths for SM2 ecdh keys	2022-11-21 10:09:57 +08:00
Sun Yimin	984913e228	sm2,smx509: add encoding paths for SM2 ecdh keys	2022-11-21 09:31:30 +08:00
Sun Yimin	9805aa448a	x509: create CRLs with Issuer.RawSubject	2022-11-18 11:45:46 +08:00
Sun Yimin	17b873a345	x509: Reallow duplicate attributes in CSRs.	2022-11-18 10:43:39 +08:00
Sun Yimin	94087a6660	x509: Reallow duplicate attributes in CSRs.	2022-11-18 10:28:22 +08:00
Sun Yimin	289bfe16c0	x509: add support for PKCS8/PKIX X25519 key encodings preparation	2022-11-18 10:21:25 +08:00
Sun Yimin	c4540b0c31	add name constraints test	2022-11-15 14:48:49 +08:00
Sun Yimin	68e297f49b	remove unused member Raw from certificate, #95	2022-11-15 11:09:01 +08:00
Sun Yimin	b7c636b87d	export ParseName for tls/tlcp to parse certificate authorities	2022-11-09 16:18:08 +08:00
Sun Yimin	7490af1dca	review x509 and readme	2022-11-03 11:12:26 +08:00
Sun Yimin	1ce7714cc9	rollback first #93	2022-11-02 17:11:18 +08:00
Sun Yimin	fd940fcd06	fix failed case for golang < 1.18.x	2022-11-02 16:56:06 +08:00
Sun Yimin	8b25009e6f	respect GODEBUG changes for allowing SHA1 certificates #93	2022-11-02 16:42:50 +08:00
emmansun	82326621ee	add proxy methods for rsa pkcs1 pub/priv keys	2022-10-30 11:38:17 +08:00
Sun Yimin	4ba1372fa0	update comments	2022-10-24 16:31:26 +08:00
Sun Yimin	d35482a358	pkcs8 sm9 master sign/encrypt private key support	2022-10-24 11:00:13 +08:00
emmansun	404cd10210	support sm9 key format with gmssl	2022-10-22 15:49:01 +08:00
Sun Yimin	6a556b26d3	smx509: don't panic marshaling invalid ECDSA keys #81	2022-08-30 10:35:57 +08:00
Sun Yimin	a507f61c7c	fix bug	2022-08-17 15:30:21 +08:00
Sun Yimin	93dca77af8	sync code from sm2fiat and branch 1.16	2022-08-17 15:23:59 +08:00
Sun Yimin	2071214f1f	x509: fix error message	2022-08-02 15:09:34 +08:00
Emman	eb94980db3	run "gofmt -s -w"	2022-07-15 16:42:39 +08:00
Sun Yimin	7e81d05ce9	[sync] crypto/x509: restrict CRL number to <=20 octets #69	2022-07-15 10:25:53 +08:00
Sun Yimin	58513465fa	x509: supplement test cases	2022-07-14 15:03:15 +08:00
Sun Yimin	823cf4a470	test: reduce fmt.Printf	2022-06-17 08:49:50 +08:00
Sun Yimin	6b8782ddf1	fix error	2022-06-09 09:28:46 +08:00
Sun Yimin	936c19772e	temp solution for darwin	2022-06-09 09:11:43 +08:00
Sun Yimin	163fb51082	as a temp solution for darwin	2022-06-09 09:03:49 +08:00
Sun Yimin	60f734b82c	disable signing with MD5WithRSA #56	2022-05-13 08:22:35 +08:00
Sun Yimin	dafbb30c6e	use SAN when comparing certs during path building, #55	2022-05-09 14:47:23 +08:00
Sun Yimin	322aa881ed	EKU nesting enforcement, #54	2022-05-09 14:35:51 +08:00
Emman	41d0934ef4	crypto/x509: revert serial length restriction	2022-04-22 08:37:49 +08:00
Emman	64f522ea1b	Revert "#43, crypto/x509: don't allow too long serials" ... This reverts commit b3f10b9a4cfeb8c384282f3e61aaf7356efab636. # Conflicts: # smx509/x509.go # smx509/x509_test.go	2022-04-22 08:28:12 +08:00
Emman	ca98bd6f5c	crypto/x509: reject duplicate extensions #48	2022-04-19 16:29:41 +08:00
emmansun	77f61fce9c	crypto/x509: don't create certs with negative serials #47	2022-04-17 09:37:03 +08:00
Emman	35732a2822	#45, #46	2022-04-15 11:14:30 +08:00
Emman	155ef2943d	#44, crypto/x509: omit empty extensions SEQUENCE	2022-04-15 11:05:14 +08:00
Emman	b3f10b9a4c	#43, crypto/x509: don't allow too long serials	2022-04-15 11:01:11 +08:00
Emman	db4ee8585a	expose type cast method	2022-04-13 09:41:38 +08:00
emmansun	c7066d2256	fix ut error	2022-04-11 19:50:44 +08:00