Expand description
§Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
rasn-pkix is an implementation of the data types defined in IETF
RFC 5280 also known PKIX.
This does not provide an implementation of a PKIX certificate generator or
validator, rasn-pkix provides a implementation of the underlying data types
used decode and encode certificates from DER.
Modules§
- Enrollment over Secure Transport
Structs§
- Identifies what algorithm was used, along with any parameters used as input.
- Identifying the public key corresponding to the private key used to sign a certificate.
- CertPathControls provides the controls needed to initialize an X.509
- An X.509 certificate
- A signed list of revoked certificates.
- Extension to an X.509 certificate.
- Identifies a revoked certificate.
- The subject’s public key, and the algorithm used to encode it.
- The list of revoked certificates along with associated metadata.
- Information associated with the subject of the certificate and the CA that issued it.
- Trust anchors are widely used to verify digital signatures and validate certification paths [RFC5280][X.509]. They are required when validating certification paths. Though widely used, there is no standard format for representing trust anchor information. The RFC-5914 document describes the TrustAnchorInfo structure.
- The validity period of the certificate.
- The version of a encoded certificate.
Enums§
- A general time type.
- TrustAnchorChoice provides three options for representing a trust anchor.