go/src/crypto/x509/name_constraints_test.go

const testNameConstraintsAgainstOpenSSL …

const debugOpenSSLFailure …

type nameConstraintsTest …

type constraintsSpec …

type leafSpec …

var nameConstraintsTests …

func makeConstraintsCACert(constraints constraintsSpec, name string, key *ecdsa.PrivateKey, parent *Certificate, parentKey *ecdsa.PrivateKey) (*Certificate, error) { … }

func makeConstraintsLeafCert(leaf leafSpec, key *ecdsa.PrivateKey, parent *Certificate, parentKey *ecdsa.PrivateKey) (*Certificate, error) { … }

func customConstraintsExtension(typeNum int, constraint []byte, isExcluded bool) pkix.Extension { … }

func addConstraintsToTemplate(constraints constraintsSpec, template *Certificate) error { … }

func parseEKUs(ekuStrs []string) (ekus []ExtKeyUsage, unknowns []asn1.ObjectIdentifier, err error) { … }

func TestConstraintCases(t *testing.T) { … }

func writePEMsToTempFile(certs []*Certificate) *os.File { … }

func testChainAgainstOpenSSL(t *testing.T, leaf *Certificate, intermediates, roots *CertPool) (string, error) { … }

var rfc2821Tests …

func TestRFC2821Parsing(t *testing.T) { … }

func TestBadNamesInConstraints(t *testing.T) { … }

func TestBadNamesInSANs(t *testing.T) { … }