MakeC14N10ExclusiveCanonicalizerWithPrefixList constructs an exclusive Canonicalizer from a PrefixList in NMTOKENS format (a white space separated lis

MakeC14N11Canonicalizer constructs an inclusive canonicalizer.

NSDetatch makes a copy of the passed element, and declares any namespaces in the passed context onto the new element before returning it.

Validate verifies that the passed element contains a valid enveloped signature matching a currently-valid certificate in the context's CertificateStor

canonicalPrep accepts an *etree.Element and transforms it into one which is ready for serialization into inclusive canonical form. Specifically this e

LookupPrefix attempts to find a declared namespace for the specified prefix. If the prefix is an empty string this will be the default namespace for t

MakeC14N10RecCanonicalizer constructs an inclusive canonicalizer.

NSFindIterateCtx conducts a depth-first traversal searching for elements with the specified tag in the specified namespace. It uses the passed NSConte

NSFindOneCtx conducts a depth-first search for the specified element. If such an element is found a reference to it is returned.

NewSigningContext creates a new signing context with the given signer and certificate chain. Note that e.g. rsa.PrivateKey implements the crypto.Signe

findSignature searches for a Signature element referencing the passed root element.

CheckLimit checks the traversal limit before calling the handler function

MakeC14N10ExclusiveWithCommentsCanonicalizerWithPrefixList constructs an exclusive Canonicalizer from a PrefixList in NMTOKENS format (a white space s

MakeC14N11WithCommentsCanonicalizer constructs an inclusive canonicalizer.

NSBuildParentContext recurses upward from an element in order to build an NSContext for its immediate parent. If the element has no parent DefaultNSCo

NSFindIterateChildrenCtx takes an element and its surrounding context, and iterates the children of that element searching for an element matching the

TransformExcC14n transforms the passed element into xml-exc-c14n form.

Transform returns a new element equivalent to the passed root el, but with the set of transformations described by the ref applied. The functionality

MakeC14N10WithCommentsCanonicalizer constructs an inclusive canonicalizer.

NSFindIterate behaves identically to NSFindIterateCtx, but uses DefaultNSContext as the surrounding context.

NSFindOne behaves identically to NSFindOneCtx, but uses DefaultNSContext for context.

NSFindOneCtx conducts a depth-first search for the specified element. If such an element is found a reference to it is returned.

NSIterateChildren iterates the children of an element, invoking the passed handler with each direct child of the element, and the context surrounding

NSSelectOneCtx conducts a depth-first search for an element with the specified namespace and tag. If such an element is found, a new *etree.Element is

NSTraverse traverses an element tree, invoking the passed handler for each element in the tree.

NSUnmarshalElement unmarshals the passed etree Element into the value pointed to by v using encoding/xml in the context of the passed NSContext. If v

In most places, we use etree Elements, but while deserializing the Signature, we use encoding/xml unmarshal directly to convert to a convenient go str

Canonicalize transforms the input Element into a serialized XML document in canonical form.

Canonicalize transforms the input Element into a serialized XML document in canonical form.

Canonicalize transforms the input Element into a serialized XML document in canonical form.

GetChain impliments X509ChainStore using the underlying tls.Certificate

GetKeyPair implements X509KeyStore using the underlying tls.Certificate

NSFindOneChild behaves identically to NSFindOneChildCtx, but uses DefaultNSContext for context.

NSSelectOne behaves identically to NSSelectOneCtx, but uses DefaultNSContext as the surrounding context.

Prefixes returns a copy of this context's prefix map.

SetUnderlyingElement will be called with a reference to the Element this Signature was unmarshaled from.

Useful for signing query string (including DEFLATED AuthnRequest) when using HTTP-Redirect to make a signed request. See 3.4.4.1 DEFLATE Encoding of h