criticaltrust 0.5.1

Digital signatures implementation for CriticalUp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

// SPDX-FileCopyrightText: The Ferrocene Developers
// SPDX-License-Identifier: MIT OR Apache-2.0

//! High-level interface to verify the integrity of archives and installations.

mod detect_manifest;
mod verifier;

use std::path::PathBuf;

pub use verifier::{IntegrityVerifier, VerifiedPackage};

/// Integrity error detected by [`IntegrityVerifier`].
#[derive(Debug, thiserror::Error)]
pub enum IntegrityError {
    #[error("failed to deserialize the package manifest at {path}")]
    PackageManifestDeserialization {
        path: PathBuf,
        #[source]
        inner: serde_json::Error,
    },
    #[error("failed to verify the package manifest at {path}")]
    PackageManifestVerification {
        path: PathBuf,
        #[source]
        inner: crate::Error,
    },
    #[error("wrong POSIX permissions for {path} (expected: {expected:o}, found {found:o})")]
    WrongPosixPermissions {
        path: PathBuf,
        expected: u32,
        found: u32,
    },
    #[error("wrong checksum for {path}")]
    WrongChecksum { path: PathBuf },
    #[error("the product name of {path} is not {expected} (the file path is wrong)")]
    WrongProductName { path: PathBuf, expected: String },
    #[error("the package name of {path} is not {expected} (the file path is wrong)")]
    WrongPackageName { path: PathBuf, expected: String },
    #[error("no package manifest found")]
    NoPackageManifestFound,
    #[error("expected file {path} is not present")]
    MissingFile { path: PathBuf },
    #[error("unexpected file {path} is present")]
    UnexpectedFile { path: PathBuf },
    #[error("unexpected file {path} in prefix managed by CriticalUp ({prefix})")]
    UnexpectedFileInManagedPrefix { path: PathBuf, prefix: PathBuf },
    #[error("file {path} is referenced by multiple package manifests")]
    FileReferencedByMultipleManifests { path: PathBuf },
    #[error("file {path} was loaded multiple times")]
    FileLoadedMultipleTimes { path: PathBuf },
    #[error("revocation information is missing which is required to verify")]
    MissingRevocationInfo,
}