isomdl 0.2.0

ISO mDL implementation in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

use anyhow::{Context, Error};
use der::{DecodePem, EncodePem};
use serde::{Deserialize, Serialize};
use x509_cert::Certificate;

/// A collection of roots of trust, each with a specific purpose.
#[derive(Clone, Serialize, Deserialize, Default)]
pub struct TrustAnchorRegistry {
    /// The roots of trust in this registry.
    pub anchors: Vec<TrustAnchor>,
}

/// A root of trust for a specific purpose.
#[derive(Debug, Clone)]
pub struct TrustAnchor {
    pub certificate: Certificate,
    pub purpose: TrustPurpose,
}

/// Identifies what purpose the certificate is trusted for.
#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
pub enum TrustPurpose {
    /// Issuer Authority Certificate Authority as defined in 18013-5.
    Iaca,
    /// Reader Certificate Authority as defined in 18013-5.
    ReaderCa,
}

/// PEM representation of a TrustAnchor, used for serialization and deserialization only.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct PemTrustAnchor {
    pub certificate_pem: String,
    pub purpose: TrustPurpose,
}

impl TrustAnchorRegistry {
    /// Build a trust anchor registry from PEM certificates.
    pub fn from_pem_certificates(certs: Vec<PemTrustAnchor>) -> Result<Self, Error> {
        Ok(Self {
            anchors: certs
                .into_iter()
                .enumerate()
                .map(|(index, t)| {
                    TrustAnchor::try_from(t)
                        .context(format!("Failed to build trust anchor for cert no. {index}"))
                })
                .collect::<Result<_, _>>()?,
        })
    }
}

impl<'l> TryFrom<&'l TrustAnchor> for PemTrustAnchor {
    type Error = Error;

    fn try_from(value: &'l TrustAnchor) -> Result<Self, Self::Error> {
        Ok(Self {
            certificate_pem: value.certificate.to_pem(Default::default())?,
            purpose: value.purpose,
        })
    }
}

impl TryFrom<PemTrustAnchor> for TrustAnchor {
    type Error = Error;

    fn try_from(value: PemTrustAnchor) -> Result<Self, Self::Error> {
        Ok(Self {
            certificate: Certificate::from_pem(&value.certificate_pem)?,
            purpose: value.purpose,
        })
    }
}

impl Serialize for TrustAnchor {
    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
    where
        S: serde::Serializer,
    {
        use serde::ser::Error;

        PemTrustAnchor::try_from(self)
            .map_err(S::Error::custom)?
            .serialize(serializer)
    }
}

impl<'de> Deserialize<'de> for TrustAnchor {
    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
    where
        D: serde::Deserializer<'de>,
    {
        use serde::de::Error;

        PemTrustAnchor::deserialize(deserializer)?
            .try_into()
            .map_err(D::Error::custom)
    }
}