ades-rs 0.1.0

AdES digital signatures (CAdES, PAdES, XAdES, JAdES) for the eIDAS 2.0 ecosystem
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use der::Decode;
use x509_cert::Certificate as X509Certificate;

use crate::error::AdesError;

/// A parsed X.509 certificate.
///
/// Wraps [`x509_cert::Certificate`] with convenience methods for AdES signing.
#[derive(Debug, Clone)]
pub struct Certificate {
    inner: X509Certificate,
    /// Raw DER bytes — kept to avoid re-encoding when building CMS structures.
    der: Vec<u8>,
}

impl Certificate {
    /// Parses a certificate from DER bytes.
    ///
    /// # Errors
    ///
    /// Returns [`AdesError::Der`] if the bytes are not valid DER.
    pub fn from_der(der: &[u8]) -> Result<Self, AdesError> {
        let inner = X509Certificate::from_der(der)?;
        Ok(Self {
            inner,
            der: der.to_vec(),
        })
    }

    /// Returns the raw DER encoding of this certificate.
    #[must_use]
    pub fn to_der(&self) -> &[u8] {
        &self.der
    }

    /// Returns a reference to the underlying [`x509_cert::Certificate`].
    #[must_use]
    pub fn inner(&self) -> &X509Certificate {
        &self.inner
    }
}