type crypto/x509.Certificate

132 uses

	crypto/x509 (current package)
		cert_pool.go#L50: 	constraint func([]*Certificate) error
		cert_pool.go#L60: 	getCert func() (*Certificate, error)
		cert_pool.go#L81: func (s *CertPool) cert(n int) (*Certificate, func([]*Certificate) error, error) {
		cert_pool.go#L126: 	cert       *Certificate
		cert_pool.go#L127: 	constraint func([]*Certificate) error
		cert_pool.go#L132: func (s *CertPool) findPotentialParents(cert *Certificate) []potentialParent {
		cert_pool.go#L172: func (s *CertPool) contains(cert *Certificate) bool {
		cert_pool.go#L180: func (s *CertPool) AddCert(cert *Certificate) {
		cert_pool.go#L184: 	s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
		cert_pool.go#L194: func (s *CertPool) addCertFunc(rawSum224 sum224, rawSubject string, getCert func() (*Certificate, error), constraint func([]*Certificate) error) {
		cert_pool.go#L237: 			v *Certificate
		cert_pool.go#L239: 		s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
		cert_pool.go#L287: func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error) {
		cert_pool.go#L291: 	s.addCertFunc(sha256.Sum224(cert.Raw), string(cert.RawSubject), func() (*Certificate, error) {
		constraints.go#L510: func checkChainConstraints(chain []*Certificate) error {
		parser.go#L533: func parseNameConstraintsExtension(out *Certificate, e pkix.Extension) (unhandled bool, err error) {
		parser.go#L672: func processExtensions(out *Certificate) error {
		parser.go#L886: func parseCertificate(der []byte) (*Certificate, error) {
		parser.go#L887: 	cert := &Certificate{}
		parser.go#L1076: func ParseCertificate(der []byte) (*Certificate, error) {
		parser.go#L1089: func ParseCertificates(der []byte) ([]*Certificate, error) {
		parser.go#L1090: 	var certs []*Certificate
		root_unix.go#L28: func (c *Certificate) systemVerify(opts *VerifyOptions) (chains [][]*Certificate, err error) {
		verify.go#L67: 	Cert   *Certificate
		verify.go#L105: 	Certificate *Certificate
		verify.go#L147: 	Cert *Certificate
		verify.go#L153: 	hintCert *Certificate
		verify.go#L443: func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *VerifyOptions) error {
		verify.go#L542: func (c *Certificate) Verify(opts VerifyOptions) ([][]*Certificate, error) {
		verify.go#L596: 	var candidateChains [][]*Certificate
		verify.go#L598: 		candidateChains = [][]*Certificate{{c}}
		verify.go#L600: 		candidateChains, err = c.buildChains([]*Certificate{c}, nil, &opts)
		verify.go#L622: 	candidateChains = slices.DeleteFunc(candidateChains, func(chain []*Certificate) bool {
		verify.go#L663: func appendToFreshChain(chain []*Certificate, cert *Certificate) []*Certificate {
		verify.go#L664: 	n := make([]*Certificate, len(chain)+1)
		verify.go#L675: func alreadyInChain(candidate *Certificate, chain []*Certificate) bool {
		verify.go#L725: func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, opts *VerifyOptions) (chains [][]*Certificate, err error) {
		verify.go#L728: 		hintCert *Certificate
		verify.go#L776: 			var childChains [][]*Certificate
		verify.go#L936: func (c *Certificate) VerifyHostname(h string) error {
		verify.go#L981: func checkChainForKeyUsage(chain []*Certificate, keyUsages []ExtKeyUsage) bool {
		verify.go#L1180: func policiesValid(chain []*Certificate, opts VerifyOptions) bool {
		x509.go#L704: type Certificate struct {
		x509.go#L913: func (c *Certificate) Equal(other *Certificate) bool {
		x509.go#L920: func (c *Certificate) hasSANExtension() bool {
		x509.go#L928: func (c *Certificate) CheckSignatureFrom(parent *Certificate) error {
		x509.go#L957: func (c *Certificate) CheckSignature(algo SignatureAlgorithm, signed, signature []byte) error {
		x509.go#L961: func (c *Certificate) hasNameConstraints() bool {
		x509.go#L965: func (c *Certificate) getSANExtension() []byte {
		x509.go#L1047: func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) error {
		x509.go#L1199: func buildCertExtensions(template *Certificate, subjectIsEmpty bool, authorityKeyId []byte, subjectKeyId []byte) (ret []pkix.Extension, err error) {
		x509.go#L1523: func subjectBytes(cert *Certificate) ([]byte, error) {
		x509.go#L1679: func CreateCertificate(rand io.Reader, template, parent *Certificate, pub, priv any) ([]byte, error) {
		x509.go#L1855: func (c *Certificate) CreateCRL(rand io.Reader, priv any, revokedCerts []pkix.RevokedCertificate, now, expiry time.Time) (crlBytes []byte, err error) {
		x509.go#L2417: func CreateRevocationList(rand io.Reader, template *RevocationList, issuer *Certificate, priv crypto.Signer) ([]byte, error) {
		x509.go#L2567: func (rl *RevocationList) CheckSignatureFrom(parent *Certificate) error {

	crypto/tls
		cache.go#L19: func (wcc *weakCertCache) newCert(der []byte) (*x509.Certificate, error) {
		cache.go#L21: 		if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {
		cache.go#L34: 	} else if v := entry.(weak.Pointer[x509.Certificate]).Value(); v != nil {
		common.go#L289: 	PeerCertificates []*x509.Certificate
		common.go#L300: 	VerifiedChains [][]*x509.Certificate
		common.go#L666: 	VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
		common.go#L1634: 	Leaf *x509.Certificate
		common.go#L1639: func (c *Certificate) leaf() (*x509.Certificate, error) {
		common.go#L1812: 	UnverifiedCertificates []*x509.Certificate
		common.go#L1830: func fipsAllowedChains(chains [][]*x509.Certificate) ([][]*x509.Certificate, error) {
		common.go#L1835: 	permittedChains := make([][]*x509.Certificate, 0, len(chains))
		common.go#L1849: func fipsAllowChain(chain []*x509.Certificate) bool {
		common.go#L1867: func anyValidVerifiedChain(verifiedChains [][]*x509.Certificate, opts x509.VerifyOptions) bool {
		common.go#L1872: 		if slices.ContainsFunc(chain, func(cert *x509.Certificate) bool {
		conn.go#L57: 	peerCertificates []*x509.Certificate
		conn.go#L60: 	verifiedChains [][]*x509.Certificate
		defaults_fips140.go#L67: func isCertificateAllowedFIPS(c *x509.Certificate) bool {
		handshake_client.go#L1100: 	certs := make([]*x509.Certificate, len(certificates))
		handshake_server.go#L942: 	certs := make([]*x509.Certificate, len(certificates))
		key_agreement.go#L35: 	processServerKeyExchange(*Config, *clientHelloMsg, *serverHelloMsg, *x509.Certificate, *serverKeyExchangeMsg) error
		key_agreement.go#L36: 	generateClientKeyExchange(*Config, *clientHelloMsg, *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error)
		key_agreement.go#L78: func (ka rsaKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
		key_agreement.go#L82: func (ka rsaKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
		key_agreement.go#L271: func (ka *ecdheKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
		key_agreement.go#L371: func (ka *ecdheKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
		ticket.go#L90: 	peerCertificates []*x509.Certificate
		ticket.go#L93: 	verifiedChains   [][]*x509.Certificate
		ticket.go#L178: func certificatesToBytesSlice(certs []*x509.Certificate) [][]byte {
		ticket.go#L257: 		var chain []*x509.Certificate

	github.com/refraction-networking/utls
		cache.go#L16: 	cert *x509.Certificate
		cache.go#L48: 	cert *x509.Certificate
		common.go#L279: 	PeerCertificates []*x509.Certificate
		common.go#L290: 	VerifiedChains [][]*x509.Certificate
		common.go#L646: 	VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
		common.go#L1621: 	Leaf *x509.Certificate
		common.go#L1626: func (c *Certificate) leaf() (*x509.Certificate, error) {
		common.go#L1756: 	UnverifiedCertificates []*x509.Certificate
		common.go#L1774: func fipsAllowedChains(chains [][]*x509.Certificate) ([][]*x509.Certificate, error) {
		common.go#L1779: 	permittedChains := make([][]*x509.Certificate, 0, len(chains))
		common.go#L1793: func fipsAllowChain(chain []*x509.Certificate) bool {
		common.go#L1807: func fipsAllowCert(c *x509.Certificate) bool {
		conn.go#L55: 	peerCertificates []*x509.Certificate
		conn.go#L61: 	verifiedChains [][]*x509.Certificate
		handshake_client.go#L1124: 	certs := make([]*x509.Certificate, len(certificates))
		handshake_server.go#L910: 	certs := make([]*x509.Certificate, len(certificates))
		key_agreement.go#L34: 	processServerKeyExchange(*Config, *clientHelloMsg, *serverHelloMsg, *x509.Certificate, *serverKeyExchangeMsg) error
		key_agreement.go#L35: 	generateClientKeyExchange(*Config, *clientHelloMsg, *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error)
		key_agreement.go#L77: func (ka rsaKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
		key_agreement.go#L81: func (ka rsaKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
		key_agreement.go#L275: func (ka *ecdheKeyAgreement) processServerKeyExchange(config *Config, clientHello *clientHelloMsg, serverHello *serverHelloMsg, cert *x509.Certificate, skx *serverKeyExchangeMsg) error {
		key_agreement.go#L360: func (ka *ecdheKeyAgreement) generateClientKeyExchange(config *Config, clientHello *clientHelloMsg, cert *x509.Certificate) ([]byte, *clientKeyExchangeMsg, error) {
		ticket.go#L89: 	peerCertificates  []*x509.Certificate
		ticket.go#L93: 	verifiedChains    [][]*x509.Certificate
		ticket.go#L173: func certificatesToBytesSlice(certs []*x509.Certificate) [][]byte {
		ticket.go#L243: 		var chain []*x509.Certificate
		u_public.go#L694: 	ServerCertificates []*x509.Certificate,
		u_public.go#L695: 	VerifiedChains [][]*x509.Certificate) *ClientSessionState {
		u_public.go#L735: func (css *ClientSessionState) ServerCertificates() []*x509.Certificate {
		u_public.go#L740: func (css *ClientSessionState) VerifiedChains() [][]*x509.Certificate {
		u_public.go#L783: func (css *ClientSessionState) SetServerCertificates(ServerCertificates []*x509.Certificate) {
		u_public.go#L790: func (css *ClientSessionState) SetVerifiedChains(VerifiedChains [][]*x509.Certificate) {