# Functions
DecodeSignedTRC parses the signed TRC.
DecodeTRC parses the payload form ASN.1 DER format.
ExtractIA extracts the ISD-AS from the distinguished name.
ParsePEMCerts parses the PEM encoded certificate blocks in raw.
ReadPEMCerts reads the PEM file and parses the certificate blocks in it.
SubjectKeyID computes a subject key identifier for a given public key.
TRCIDFromString creates new TRCID from the provided string.
ValidateCert validates the SCION certificate, as part of this it will validate that it is of valid type.
ValidateChain validates that a slice of SCION certificates can be a valid chain.
VerifyChain attempts to verify the certificate chain against every TRC included in opts.
# Constants
Valid SCION certificate types.
Valid SCION certificate types.
CertVersion is the x509 certificate version number 3.
Valid SCION certificate types.
Valid SCION certificate types.
Update types.
Valid SCION certificate types.
Valid SCION certificate types.
Update types.
# Variables
ErrCertForOtherISD indicates a certificate that is for another ISD.
ErrDuplicate indicates a duplicate certificate in the TRC.
ErrDuplicateAS indicates an AS is duplicated in the sequence.
ErrGracePeriodNonZero indicates the grace period is non-zero in a non-base TRC.
ErrInvalidCertType indicates an invalid certificate type.
ErrInvalidID indicates an invalid TRC ID.
ErrInvalidQuorumSize indicates the quorum size is outside of the [1,255] range.
ErrInvalidTRCIDString indicates that provided string in not valid TRC ID formatted string.
ErrInvalidTRCVersion indicates an invalid TRC version.
ErrInvalidValidityPeriod indicates an invalid validity period.
ErrNoASes indicates the ASes sequence is empty in the TRC.
ErrNotEnoughVoters indicates that the number of voters is smaller than the voting quorum.
ErrReservedNumber indicates that the number is reserved.
ErrSerialBeforeBase indicates that the serial number is smaller than the base number.
ErrTRCValidityNotCovered indicates that the TRC validity period is not covered by a certificate.
ErrUnclassifiedCertificate indicates a certificate could not be classified as neither sensitive voting, regular voting nor root.
ErrVotesOnBaseTRC indicates that there are votes on a base TRC.
ErrWildcardAS indicates a wildcard AS.
ErrWildcardISD indicates a wildcard ISD.
x.509v3 extension oids.
x.509v3 extension oids.
x.509v3 extension oids.
x.509v3 extension oids.
x.509v3 extension oids.
ExtKeyUsage oids.
ExtKeyUsage oids.
ExtKeyUsage oids.
ExtKeyUsage oids.
ExtKeyUsage oids.
ExtKeyUsage oids.
DistinguishedName oids.
Valid SCION signatures.
# Structs
CAPolicy defines how AS certificates are generated.
SignedTRC represents the parsed signed TRC.
TRC is the TRC payload.
TRCID identifies a TRC.
Update holds metadata about a TRC update.
Validity indicates the TRC validity.
VerifyOptions contains parameters for certificate chain verification.
# Type aliases
CertType describes the type of the SCION certificate.
SignedTRCs represents a list of parsed signed TRC.
UpdateType indicates the type of update.