Golang: verify cert was signed using private key

Question

I'm porting an app from php to go and can't figure out how to verify a SSL cert was signed by our private key for a given server.

In php its simply: openssl_x509_check_private_key($cert, $pkey)

I can verify start/end dates and validity for a host, but can't see a way to do this.

Answer 1

The docs for openssl_x509_check_private_key don't actually say what the arguments are. I'm going to assume that they're either filenames for PEM encoded data, or PEM encoded data (strings) directly.

In that case you can simply call tls.LoadX509KeyPair or tls.X509KeyPair, which will check that the certificate and key match.

Check the source for tls.X509KeyPair if you are interested in the low-level API that performs the actual check (search for x509.ParseCertificate).