package
1.6.5
Repository: https://github.com/cloudflare/cfssl.git
Documentation: pkg.go.dev

# Functions

ChainHashUbiquity scores a chain based on the hash algorithms used by the certificates in the chain.
ChainKeyAlgoUbiquity scores a chain based on the public-key algorithms used by the certificates in the chain.
CompareChainCryptoSuite ranks chains with more current crypto suite higher.
CompareChainExpiry ranks chain that lasts longer higher.
CompareChainHashPriority ranks chains with more current hash functions higher.
CompareChainHashUbiquity returns a positive, zero, or negative value if the hash ubiquity of the first chain is greater, equal, or less than the second chain.
CompareChainKeyAlgoPriority ranks chains with more current key algorithm higher.
CompareChainKeyAlgoUbiquity returns a positive, zero, or negative value if the public-key ubiquity of the first chain is greater, equal, or less than the second chain.
CompareChainLength ranks shorter chain higher.
CompareExpiryUbiquity ranks two certificate chains based on the exiry dates of intermediates and roots.
ComparePlatformUbiquity compares the cross-platform ubiquity between chain1 and chain2.
CompareSHA2Homogeneity compares the chains based on SHA2 homogeneity.
CrossPlatformUbiquity returns a ubiquity score (presumably relecting the market share in percentage) based on whether the given chain can be verified with the different platforms' root certificate stores.
Filter filters out the chains with highest rank according to the ranking function f.
HashPriority returns the hash priority of the chain as the average of hash priority of certs in it.
KeyAlgoPriority returns the key algorithm priority of the chain as the average of key algorithm priority of certs in it.
LoadPlatforms reads the file content as a json object array and convert it to Platforms.
SHA1DeprecationMessages returns a list of human-readable messages.
SHA1RawPublicKey returns a SHA1 hash of the raw certificate public key.
SHA2Homogeneity returns 1 if the chain contains only SHA-2 certs (excluding root).
UntrustedPlatforms returns a list of platforms which don't trust the root certificate.

# Constants

RSA and DSA are considered ubiquitous.
RSA and DSA are considered ubiquitous.
RSA and DSA are considered ubiquitous.
RSA and DSA are considered ubiquitous.
High indicates the deprecation policy will strongly affect user experience.
Low indicates the deprecation policy won't affect user experience.
SHA1 is ubiquitous.
SHA1 is ubiquitous.
Medium indicates the deprecation policy will affect user experience either in a minor way or for a limited scope of users.
None indicates there is no deprecation.
RSA and DSA are considered ubiquitous.
SHA1 is ubiquitous.
SHA1 is ubiquitous.
RSA and DSA are considered ubiquitous.
SHA1 is ubiquitous.

# Variables

Platforms is the list of platforms against which ubiquity bundling will be optimized.
SHA1DeprecationPolicys ia a list of various SHA1DeprecationPolicy's proposed by major browser producers.

# Structs

A Platform contains ubiquity information on supported crypto algorithms and root certificate store name.
SHA1DeprecationPolicy encodes how a platform deprecates the support of SHA1.

# Type aliases

CertSet is a succint set of x509 certificates which only stores certificates' SHA1 hashes.
DeprecationSeverity encodes the severity of a deprecation policy.
HashUbiquity represents a score for how ubiquitous a given hash algorithm is; the higher the score, the more preferable the algorithm is.
KeyAlgoUbiquity represents a score for how ubiquitous a given public-key algorithm is; the higher the score, the more preferable the algorithm is.
RankingFunc returns the relative rank between chain1 and chain2.