Struct ChainVerifier 

pub struct ChainVerifier { /* private fields */ }

Verifies Apple’s certificate chains.

Implementations

impl ChainVerifier

pub fn new(root_certificates: Vec<Vec<u8>>) -> Self

Creates a verifier trusting the given DER-encoded root certificates.

pub fn verify( &self, leaf: &[u8], intermediate: &[u8], effective_date: Option<u64>, enable_online_checks: bool, ) -> Result<Vec<u8>, ChainVerifierError>

Verifies the chain and returns the leaf’s DER-encoded SubjectPublicKeyInfo.

Arguments

• leaf - DER-encoded leaf certificate
• intermediate - DER-encoded intermediate certificate
• effective_date - Optional Unix timestamp for validity checks
• enable_online_checks - Whether the verified public key is cached, matching the official Apple libraries. Revocation checking is not performed.

pub fn verify_at( &self, leaf: &[u8], intermediate: &[u8], effective_date: Option<u64>, enable_online_checks: bool, now: u64, ) -> Result<Vec<u8>, ChainVerifierError>

ChainVerifier::verify, with the current time injected. Exposed for deterministic testing of cache expiry.

pub fn cache_len(&self) -> usize

Number of entries currently held. Exposed for testing.