criticaltrust 0.5.1

Digital signatures implementation for CriticalUp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

// SPDX-FileCopyrightText: The Ferrocene Developers
// SPDX-License-Identifier: MIT OR Apache-2.0

use crate::keys::KeyRole;
use std::string::FromUtf8Error;
use thiserror::Error;
use time::macros::format_description;
use time::OffsetDateTime;

#[non_exhaustive]
#[derive(Debug, Error)]
pub enum Error {
    #[error(transparent)]
    FromUtf8(#[from] FromUtf8Error),
    #[error("Failed to sign data.")]
    SignatureFailed,
    #[error("Failed to verify signed data.")]
    VerificationFailed,
    #[error("Failed to generate a local key.")]
    LocalKeyGenerationFailed,
    #[error("Wrong key role for the trust root key (expected Root, found {0:?}).")]
    WrongKeyRoleForTrustRoot(KeyRole),
    #[error("Failed to serialize the contents of the signed payload.")]
    SignedPayloadSerializationFailed(#[source] serde_json::Error),
    #[error("Failed to deserialize verified data.")]
    DeserializationFailed(#[source] serde_json::Error),
    #[error("Failed to load key pair.")]
    InvalidKey(String),
    #[error("Unsupported key.")]
    UnsupportedKey,
    #[error("Verification failed because the signatures expired on '{}'.", format!("{}", .0.format(format_description!("[year]-[month]-[day] +[offset_hour]::[offset_minute]")).expect("formatting OffsetDatetime failed")))]
    RevocationSignatureExpired(OffsetDateTime),
    #[error("Failed to verify signed package '{}' because content is revoked.", .0)]
    ContentRevoked(String),
    #[error("Calling the method to load all keys and revocation info failed because revocation info already exists.")]
    RevocationInfoOverwriting,
    #[cfg(feature = "aws-kms")]
    #[error("Failed to retrieve the public key from AWS KMS.")]
    AwsKmsFailedToGetPublicKey(
        #[from]
        aws_sdk_kms::error::SdkError<
            aws_sdk_kms::operation::get_public_key::GetPublicKeyError,
            aws_smithy_runtime_api::client::orchestrator::HttpResponse,
        >,
    ),
    #[cfg(feature = "aws-kms")]
    #[error("Failed to sign data with AWS KMS.")]
    AwsKmsFailedToSign(
        #[from]
        aws_sdk_kms::error::SdkError<
            aws_sdk_kms::operation::sign::SignError,
            aws_smithy_runtime_api::client::orchestrator::HttpResponse,
        >,
    ),
}