Merge pull request #552 from mattbostock/add_x509_rsa_key_pair

Add a function to validate an x509 RSA key pair

1 files changed, 16 insertions, 0 deletions

diff --git a/README.markdown b/README.markdown
index 3150e44..559a6a0 100644
--- a/README.markdown
+++ b/README.markdown
@@ -1214,6 +1214,22 @@ Instead, use:
 
 *Type*: statement.
 
+#### `validate_x509_rsa_key_pair`
+
+Validates a PEM-formatted X.509 certificate and private key using OpenSSL.
+Verifies that the certficate's signature was created from the supplied key.
+
+Fails catalog compilation if any value fails this check.
+
+Takes two arguments, the first argument must be a X.509 certificate and the
+second must be an RSA private key:
+
+  ~~~
+  validate_x509_rsa_key_pair($cert, $key)
+  ~~~
+
+*Type*: statement.
+
 #### `values`
 
 Returns the values of a given hash. For example, given `$hash = {'a'=1, 'b'=2, 'c'=3} values($hash)` returns [1,2,3].