Package github.com/adamdecaf/pwnedkeys looks up Certificates, Certificate requests, Keys, etc in the pwnedkeys.com database.
Pull the project down into an existing project:
$ go get -u github.com/adamdecaf/pwnedkeys
Then, use the library in your existing code:
cert, err := parsePEM(certBytes)
if err != nil {
// do something with the error
}
if err := pwnedkeys.CheckCertificate(http.DefaultClient, cert); err != nil { // Use a different http.Client
// reject key/cert
}Feel free to open a GitHub issue for bug reports, feature requests, or questions. I'll do my best to answer them.
- 64-bit Linux (Ubuntu, Debian), macOS
Yes please! Please createn an issue or submit a Pull Request towards the project!
Note: This project uses Go Modules, but only the Go standard library is used. Go 1.11 is required for modules, but this library should work with older Go releases.
Apache License 2.0 See LICENSE for details.