Struct ModelBasedVerifier 

pub struct ModelBasedVerifier<'a> {
    num_data_signatures: NumDataSignatures,
    trust_model: TrustModel<'a>,
}

Performs signature verification based on a trust model configuration and sets of verifiers.

Fields

num_data_signatures: NumDataSignatures

Number of distinct valid data signatures that we expect for a data file to be considered valid

trust_model: TrustModel<'a>

The trust model used by this verifier object

Implementations

impl<'a> ModelBasedVerifier<'a>

pub fn new( config: &'a OpenpgpSettings, artifact_verifiers: &'a [OpenpgpCert], trust_anchors: &'a [OpenpgpCert], ) -> Self

Create a new signature verifier object based on an OpenpgpSettings configuration, a set of artifact verifiers and trust anchors.

For VerificationMethod::Plain, the set of anchors must be empty.

pub fn verify_file_with_signatures( &'a self, signed_file: impl AsRef<Path>, signatures: &'a [OpenpgpSignature], ) -> Result<Vec<OpenpgpSignatureCheck<'a>>, Error>

Verifies one or more signatures for a signed_file.

Success of the verification is decided according to the trust model configuration of this ModelBasedVerifier. Signature verifiers are obtained from the trust model.

The return value is a boolean value as am immediate judgment about validity of the signature set, under the configured trust model.

In addition, a Vec of OpenpgpSignatureCheck is returned, with more detailed information about each checked signature. This links each signature to a signer certificate that signed it, if the signature has been found valid under the current trust model.

Note

Does not consider OpenPGP signatures with an unset creation time and instead emits a warning for them.

Errors

Returns an error, if the signed_file cannot be read.

Trait Implementations

impl<'a> Debug for ModelBasedVerifier<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.