INNER CODE UNIT · Go

VerifyAttestationWithOptions

go-piv/go-ykpiv · attestation.go:99

func VerifyAttestationWithOptions(attestationCert, attestedCert *x509.Certificate, options x509.VerifyOptions) (verifiedChains [][]*x509.Certificate, err error) {
	var attestationChains [][]*x509.Certificate

	// Verify Attestation Cert against using the verify options
	if attestationChains, err = attestationCert.Verify(options); err != nil {
		return
	}

	// Initialize intermediate chains if necessary
	if options.Intermediates == nil {
		options.Intermediates = x509.NewCertPool()
	}

	if attestationCert.IsCA {
		// Add Attestation Certificate to Trust Store
		options.Intermediates.AddCert(attestationCert)
		verifiedChains, err = attestedCert.Verify(options)
	} else {

View source record →