Package certchainutil complements the certchain package.

Package certmanager manages signed exchange certificates.

NewAugmentedChain creates a new AugmentedChain.

NewAugmentedChainFromCBOR creates a new AugmentedChain from a serialized certificate chain in the application/cert-chain+cbor format.

NewRawChain creates a new RawChain with certs.

NewRawChainFromPEM creates a new RawChain from PEM bytes.

ParseOCSPResponse parses an OCSP response in DER form.

ParseOCSPResponseForRawChain parses an OCSP response in DER form and searches for an OCSPResponse relating to c.

ReadAugmentedChain reads an application/cert-chain+cbor stream from r to create an AugmentedChain.

90 days.

7 days.

DummyOCSPResponse is a dummy OCSPResponse to use with test certificates lacking OCSP responders, such as self-signed certificates.

ErrDummyOCSPResponse is returned if VerifyForRawChain/VerifySXGCriteria is called on DummyOCSPResponse.

ErrInvalidOCSPValue is returned by ReadCBOR if the provided CBOR stream contained invalid OCSP response.

AugmentedChain is a certificate chain augmented with an OCSP response and unembedded SCTs (Signed Certificate Timestamps) for the end-entity certificate.

OCSPResponse wraps an ocsp.Response with the DER bytes.

RawChain represents an X509 certificate chain, populated with information extracted from it for convenience.