# Functions
CACerts extract CA Certificate or chain from pkcs7 degenerate signed data.
DegenerateCertificates creates degenerate certificates pkcs#7 type.
A EnciphermentCertsSelector returns a CertsSelectorFunc that selects certificates eligible for key encipherment.
FingerprintCertsSelector selects a certificate that matches hash using hashType against the digest of the raw certificate DER bytes.
NewCSRRequest creates a scep PKI PKCSReq/UpdateReq message.
NopCertsSelector returns a CertsSelectorFunc that does not do anything.
ParsePKIMessage unmarshals a PKCS#7 signed data into a PKI message struct.
WithCACerts adds option CA certificates to the SCEP operations.
WithCertsSelector adds the certificates certsSelector option to the SCEP operations.
WithLogger adds option logging to the SCEP operations.
# Constants
No description provided by the author
No description provided by the author
No description provided by the author
No description provided by the author
No description provided by the author
Undefined message types are treated as an error.
Undefined message types are treated as an error.
Undefined pkiStatus attributes are treated as an error.
Undefined message types are treated as an error.
Undefined message types are treated as an error.
Undefined pkiStatus attributes are treated as an error.
Undefined message types are treated as an error.
Undefined message types are treated as an error.
Undefined pkiStatus attributes are treated as an error.
Undefined message types are treated as an error.
# Structs
CertRepMessage is a type of PKIMessage.
CSRReqMessage can be of the type PKCSReq/RenewalReq/UpdateReq and includes a PKCS#10 CSR request.
PKIMessage defines the possible SCEP message types.
# Interfaces
A CertsSelector filters certificates.
# Type aliases
CertsSelectorFunc is a type of function that filters certificates.
FailInfo is a SCEP failInfo attribute
The FailInfo attribute MUST contain one of the following failure reasons:.
The MessageType attribute specifies the type of operation performed by the transaction.
Option specifies custom configuration for SCEP.
PKIStatus is a SCEP pkiStatus attribute which holds transaction status information.
The RecipientNonce MUST be copied from the SenderNonce and included in the reply.
SenderNonce is a random 16 byte number.
The TransactionID is a text string generated by the client when starting a transaction.