certinfo

func CertsToTables ¶

func CertsToTables(w io.Writer, certs []*x509.Certificate)

func GetCertsFromBundle ¶

func GetCertsFromBundle(certBundlePath string, fileReader Reader) ([]*x509.Certificate, error)

func GetKeyFromFile ¶

func GetKeyFromFile(
	keyFilePath string,
	keyPwEnvVar string,
	inputReader Reader,
) (crypto.PrivateKey, error)

func GetRootCertsFromFile ¶

func GetRootCertsFromFile(caBundlePath string, fileReader Reader) (*x509.CertPool, error)

func GetRootCertsFromString ¶

func GetRootCertsFromString(caBundleString string) (*x509.CertPool, error)

func IsPrivateKeyEncrypted ¶

func IsPrivateKeyEncrypted(key []byte) (bool, error)

IsPrivateKeyEncrypted checks if the given PEM key is encrypted. It returns true if encrypted, false otherwise, and an error if decoding fails.

func ParsePrivateKey ¶

func ParsePrivateKey(keyPEM []byte, pwEnvKey string, pwReader Reader) (crypto.PrivateKey, error)

ParsePrivateKey parses a PEM-encoded private key and returns it as a crypto.PrivateKey.

Supported formats:

- PKCS#8 ("BEGIN PRIVATE KEY" / "BEGIN ENCRYPTED PRIVATE KEY") — decrypted with github.com/youmark/pkcs8

- PKCS#1 RSA ("BEGIN RSA PRIVATE KEY") — cleartext or PEM-encrypted (x509.DecryptPEMBlock)

- EC private keys ("BEGIN EC PRIVATE KEY") — cleartext or certain PKCS#8-encrypted ECDSA keys

If the PEM is encrypted the function will try to read the passphrase from the environment variable named by pwEnvKey; if that is empty it will prompt the user interactively.

The function returns a descriptive error if the PEM cannot be decoded, decryption/parsing fails, or the key format is unsupported.

func PrintCertInfo ¶

func PrintCertInfo(cert *x509.Certificate, depth int, w io.Writer)