revoke

NewError provided the given category, reason, returns an Error.

ParseCertificatePEM parses and returns a PEM-encoded certificate, can handle PEM encoded PKCS #7 structures.

ParseOneCertificateFromPEM attempts to parse one PEM encoded certificate object, either a raw x509 certificate or a PKCS #7 structure possibly containing multiple certificates, from the top of certsPEM, which itself may contain multiple PEM encoded certificate objects.

ParsePKCS7 attempts to parse the DER encoded bytes of a PKCS7 structure.

SetCRLFetcher sets the function to use to read from the http response body.

SetOCSPFetcher sets the function to use to read from the http response body.

SetRemoteFetcher sets the function to use to read from the http response body.

VerifyCertificate ensures that the certificate passed in hasn't expired and checks the CRL for the server.

VerifyCertificateError ensures that the certificate passed in hasn't expired and checks the CRL for the server.

Wrap returns an error that contains the given error and an error code derived from the given category, reason and the error.

7XXX.

AuthenticationFailure occurs when the client is unable to obtain an authentication token for the request.

Code 13XX.

0x01.

0x02.

1XXX.

11XXX.

ClientHTTPError wraps a net/http error.

9XXX.

CTClientConstructionFailed occurs when the construction of a new github.com/google/certificate-transparency client fails.

10XXX.

X002.

6XXX.

21XX.

24XX.

InsertionFailed occurs when a SQL insert query failes to complete.

3XXX.

52XX.

53XX.

InvalidStatus occurs when the OCSP signing requests includes an invalid value for the certificate status.

IOError wraps an io/ioutil error.

81XX.

JSONError wraps an encoding/json error.

23XX.

Code 14XX.

51XX.

None is a non-specified error.

22XX.

Object identifier strings of the three implemented PKCS7 types.

Object identifier strings of the three implemented PKCS7 types.

Object identifier strings of the three implemented PKCS7 types.

8XXX.

X003.

5XXX.

PrecertInvalidPoison occurs when a precert is passed to SignFromPrecert and has a invalid CT poison extension value or the extension is not critical.

PrecertMissingPoison occurs when a precert is passed to SignFromPrecert and is missing the CT poison extension.

PrecertSubmissionFailed occurs when submitting a precertificate to a log server fails.

2XXX.

X001.

RecordNotFound occurs when a SQL query targeting on one unique record failes to update the specified row in the table.

4XXX.

Code 11XX.

ServerRequestFailed covers any other failures from the API client.

0XXX.

Unavailable indicates that a private key mechanism (such as PKCS #11) was requested but support for that mechanism is not available.

X000.

54XX.

55xx.

Code 12XX.

CRLSet associates a PKIX certificate list with the URL the CRL is fetched from.

HardFail determines whether the failure to check the revocation status of a certificate (i.e.

HTTPClient is an instance of http.Client that will be used for all HTTP requests.

Content implements three of the six possible PKCS7 data types.

Data contains raw bytes.

EncryptedContentInfo is a subtype of PKCS7EncryptedData.

EncryptedData contains encrypted data.

Error is the error type usually returned by functions in CF SSL package.

PKCS7 represents the ASN1 PKCS #7 Content type.

SignedData defines the typical carrier of certificates and CRLs.

Category is the most significant digit of the error code.

Reason is the last 3 digits of the error code.