Struct ChainVerifier 

pub struct ChainVerifier { /* private fields */ }

A structure for verifying certificate chains.

This struct holds the root certificates and provides methods to verify certificate chains.

Implementations

impl ChainVerifier

pub fn new(root_certificates: Vec<Vec<u8>>) -> Self

Creates a new ChainVerifier with the provided root certificates.

Arguments

• root_certificates: A vector of byte slices containing the root certificates.

Returns

A new instance of ChainVerifier.

pub fn verify( &self, leaf_certificate: &Vec<u8>, intermediate_certificate: &Vec<u8>, effective_date: Option<u64>, ) -> Result<Vec<u8>, ChainVerifierError>

Verifies a certificate pair (leaf and intermediate).

This method verifies a leaf certificate against an intermediate certificate. It performs various checks to ensure the validity and integrity of the certificates.

Arguments

• leaf_certificate: The leaf certificate as a byte slice.
• intermediate_certificate: The intermediate certificate as a byte slice.
• effective_date: An optional Unix timestamp representing the effective date for the chain validation.

Returns

• Ok(Vec<u8>): If the certificates are valid, it returns the public key data from the leaf certificate.
• Err(ChainVerifierError): If the verification fails for any reason, it returns a ChainVerifierError enum. TODO: Implement issuer checking