forked from TrueCloudLab/certificates
87 lines
2.1 KiB
Go
87 lines
2.1 KiB
Go
package x509util
|
|
|
|
import (
|
|
"crypto/x509"
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
// List of signature algorithms, all of them have values in upper case to match
|
|
// them with the string representation.
|
|
const (
|
|
MD2_RSA = "MD2-RSA"
|
|
MD5_RSA = "MD5-RSA"
|
|
SHA1_RSA = "SHA1-RSA"
|
|
SHA256_RSA = "SHA256-RSA"
|
|
SHA384_RSA = "SHA384-RSA"
|
|
SHA512_RSA = "SHA512-RSA"
|
|
SHA256_RSAPSS = "SHA256-RSAPSS"
|
|
SHA384_RSAPSS = "SHA384-RSAPSS"
|
|
SHA512_RSAPSS = "SHA512-RSAPSS"
|
|
DSA_SHA1 = "DSA-SHA1"
|
|
DSA_SHA256 = "DSA-SHA256"
|
|
ECDSA_SHA1 = "ECDSA-SHA1"
|
|
ECDSA_SHA256 = "ECDSA-SHA256"
|
|
ECDSA_SHA384 = "ECDSA-SHA384"
|
|
ECDSA_SHA512 = "ECDSA-SHA512"
|
|
Ed25519 = "ED25519"
|
|
)
|
|
|
|
// SignatureAlgorithm is the JSON representation of the X509 signature algorithms
|
|
type SignatureAlgorithm x509.SignatureAlgorithm
|
|
|
|
// Set sets the signature algorithm in the given certificate.
|
|
func (s SignatureAlgorithm) Set(c *x509.Certificate) {
|
|
c.SignatureAlgorithm = x509.SignatureAlgorithm(s)
|
|
}
|
|
|
|
// UnmarshalJSON implements the json.Unmarshal interface and unmarshals a JSON
|
|
// object in the Subject struct or a string as just the subject common name.
|
|
func (s *SignatureAlgorithm) UnmarshalJSON(data []byte) error {
|
|
name, err := unmarshalString(data)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
var sa x509.SignatureAlgorithm
|
|
switch strings.ToUpper(name) {
|
|
case MD2_RSA:
|
|
sa = x509.MD2WithRSA
|
|
case MD5_RSA:
|
|
sa = x509.MD5WithRSA
|
|
case SHA1_RSA:
|
|
sa = x509.SHA1WithRSA
|
|
case SHA256_RSA:
|
|
sa = x509.SHA256WithRSA
|
|
case SHA384_RSA:
|
|
sa = x509.SHA384WithRSA
|
|
case SHA512_RSA:
|
|
sa = x509.SHA512WithRSA
|
|
case SHA256_RSAPSS:
|
|
sa = x509.SHA256WithRSAPSS
|
|
case SHA384_RSAPSS:
|
|
sa = x509.SHA384WithRSAPSS
|
|
case SHA512_RSAPSS:
|
|
sa = x509.SHA512WithRSAPSS
|
|
case DSA_SHA1:
|
|
sa = x509.DSAWithSHA1
|
|
case DSA_SHA256:
|
|
sa = x509.DSAWithSHA256
|
|
case ECDSA_SHA1:
|
|
sa = x509.ECDSAWithSHA1
|
|
case ECDSA_SHA256:
|
|
sa = x509.ECDSAWithSHA256
|
|
case ECDSA_SHA384:
|
|
sa = x509.ECDSAWithSHA384
|
|
case ECDSA_SHA512:
|
|
sa = x509.ECDSAWithSHA512
|
|
case Ed25519:
|
|
sa = x509.PureEd25519
|
|
default:
|
|
return errors.Errorf("unsupported signatureAlgorithm %s", name)
|
|
}
|
|
|
|
*s = SignatureAlgorithm(sa)
|
|
return nil
|
|
}
|