krill 0.16.0

Resource Public Key Infrastructure (RPKI) daemon
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

use std::fmt;

use openssl::error::ErrorStack;
use rpki::crypto::signer::SigningAlgorithm;
use url::Url;

use crate::commons::error::KrillIoError;

#[derive(Debug)]
pub enum SignerError {
    DecodeError,
    InvalidStorage(Url),
    IoError(KrillIoError),
    JsonError(serde_json::Error),
    KeyNotFound,
    KmipError(String),
    OpenSslError(ErrorStack),
    Other(String),
    PermanentlyUnusable,
    Pkcs11Error(String),
    TemporarilyUnavailable,
    UnsupportedSigningAlg(SigningAlgorithm),
}

impl SignerError {
    pub fn other(msg: impl fmt::Display) -> Self {
        SignerError::Other(msg.to_string())
    }
}

impl fmt::Display for SignerError {
    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
        match self {
            SignerError::DecodeError => write!(f, "Could not decode key"),
            SignerError::InvalidStorage(url) => {
                write!(f, "Invalid storage url: {url}")
            }
            SignerError::IoError(e) => e.fmt(f),
            SignerError::JsonError(e) => {
                write!(f, "Could not decode public key info: {e}")
            }
            SignerError::KeyNotFound => write!(f, "Could not find key"),
            SignerError::KmipError(e) => write!(f, "KMIP Error: {e}"),
            SignerError::OpenSslError(e) => write!(f, "OpenSSL Error: {e}"),
            SignerError::Other(e) => write!(f, "Signer error: {e}"),
            SignerError::PermanentlyUnusable => {
                write!(f, "Signer is unusable")
            }
            SignerError::Pkcs11Error(e) => write!(f, "{e}"), /* Cryptoki prefixes e with "PKCS11 error" */
            SignerError::TemporarilyUnavailable => {
                write!(f, "Signer is unavailable")
            }
            SignerError::UnsupportedSigningAlg(key_format) => {
                match key_format {
                    SigningAlgorithm::RsaSha256 => {
                        write!(f, "Signing with RSA not supported")
                    }
                    SigningAlgorithm::EcdsaP256Sha256 => {
                        write!(f, "Signing with EcdsaP256 not supported")
                    }
                }
            }
        }
    }
}

impl From<ErrorStack> for SignerError {
    fn from(e: ErrorStack) -> Self {
        SignerError::OpenSslError(e)
    }
}

impl From<serde_json::Error> for SignerError {
    fn from(e: serde_json::Error) -> Self {
        SignerError::JsonError(e)
    }
}

impl From<KrillIoError> for SignerError {
    fn from(e: KrillIoError) -> Self {
        SignerError::IoError(e)
    }
}