Lines Matching refs:Certificate
119 // Certificate types (for certificateRequestMsg)
121 CertTypeRSASign = 1 // A certificate containing an RSA key
122 CertTypeDSSSign = 2 // A certificate containing a DSA key
123 CertTypeRSAFixedDH = 3 // A certificate containing a static DH key
124 CertTypeDSSFixedDH = 4 // A certificate containing a static DH key
127 CertTypeECDSASign = 64 // A certificate containing an ECDSA-capable public key, signed with ECDSA.
128 CertTypeRSAFixedECDH = 65 // A certificate containing an ECDH-capable public key, signed with RSA.
129 CertTypeECDSAFixedECDH = 66 // A certificate containing an ECDH-capable public key, signed with ECDSA.
189 PeerCertificates []*x509.Certificate // certificate chain presented by remote peer
190 VerifiedChains [][]*x509.Certificate // verified chains built from PeerCertificates
194 SCTList []byte // signed certificate timestamp list
219 serverCertificates []*x509.Certificate // Certificate chain presented by the server
266 // Certificates contains one or more certificate chains
268 // Server configurations must include at least one certificate.
269 Certificates []Certificate
271 // NameToCertificate maps from a certificate name to an element of
272 // Certificates. Note that a certificate name can be of the form
277 NameToCertificate map[string]*Certificate
279 // RootCAs defines the set of root certificate authorities
296 // ClientCAs defines the set of root certificate authorities
297 // that servers use if required to verify a client certificate
301 // ClientCertificateTypes defines the set of allowed client certificate
306 // server's certificate chain and host name.
307 // If InsecureSkipVerify is true, TLS accepts any certificate
308 // presented by the server and any host name in that certificate.
451 // Certificate message is sent and no signature is added to
693 // WrongCertificateMessageType, if true, causes Certificate message to
755 // certificate list in the Certificate message.
898 // getCertificateForName returns the best certificate for the given name,
901 func (c *Config) getCertificateForName(name string) *Certificate {
927 // If nothing matches, return the first certificate.
949 c.NameToCertificate = make(map[string]*Certificate)
952 x509Cert, err := x509.ParseCertificate(cert.Certificate[0])
965 // A Certificate is a chain of one or more certificates, leaf first.
966 type Certificate struct {
967 Certificate [][]byte
976 // Leaf is the parsed form of the leaf certificate, which may be
979 // leaf certificate will be parsed as needed.
980 Leaf *x509.Certificate