es3 0.1.0

Library for parsing, extracting, and verifying ES3 dossier files
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

#[cfg(not(target_arch = "wasm32"))]
#[path = "bergshamra_verify_native.rs"]
mod imp;

#[cfg(target_arch = "wasm32")]
mod imp {
    use crate::verify::{SignatureFindingKind, SignatureKeyInfo, SignatureReference};

    pub(crate) struct VerifiedTarget {
        pub(crate) references: Vec<SignatureReference>,
        pub(crate) key_info: SignatureKeyInfo,
    }

    #[allow(dead_code)]
    pub(crate) enum TargetOutcome {
        Valid(VerifiedTarget),
        Failed {
            kind: SignatureFindingKind,
            message: String,
        },
    }

    pub(crate) fn verify_signature_target(
        _target_xml: &str,
        _pinned_certificates: &[Vec<u8>],
        _trusted_anchor_certificates: &[Vec<u8>],
        _embedded_certificate_values: &[Vec<u8>],
    ) -> TargetOutcome {
        TargetOutcome::Failed {
            kind: SignatureFindingKind::VerificationPolicyDenied,
            message: "cryptographic XMLDSIG verification is not available on wasm32".to_owned(),
        }
    }

    pub(crate) fn validate_trusted_anchor(
        _target_xml: &str,
        _pinned_certificates: &[Vec<u8>],
        _trusted_anchor_certificates: &[Vec<u8>],
        _embedded_certificate_values: &[Vec<u8>],
    ) -> Result<(), String> {
        Err("trusted-anchor validation is not available on wasm32".to_owned())
    }

    pub(crate) fn certificate_key_algorithm(_certificate_der: &[u8]) -> Option<String> {
        None
    }
}

pub(crate) use imp::*;