noxtls-x509 0.2.11

Internal implementation crate for noxtls: X.509, ASN.1, and DER certificate utilities.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

// Copyright (c) 2019-2026, Argenox Technologies LLC
// All rights reserved.
//
// SPDX-License-Identifier: GPL-2.0-only OR LicenseRef-Argenox-Commercial-License
//
// This file is part of the NoxTLS Library.
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by the
// Free Software Foundation; version 2 of the License.
//
// Alternatively, this file may be used under the terms of a commercial
// license from Argenox Technologies LLC.
//
// See `noxtls/LICENSE` and `noxtls/LICENSE.md` in this repository for full details.
// CONTACT: info@argenox.com

//! X.509 certificate parsing, minimal issuance helpers, PEM/DER bridging, and chain validation for NoxTLS.
//!
//! The crate re-exports a flat API from the crate root: [`Certificate`] parsing, RSA/EC/X25519/X448 key
//! material helpers, optional strict chain validation, and small DER writers used by tests and tooling.

#![cfg_attr(not(feature = "std"), no_std)]
#![forbid(unsafe_code)]
#![allow(clippy::type_complexity)]
#![allow(clippy::too_many_arguments)]
#![allow(clippy::cloned_ref_to_slice_refs)]

#[cfg(not(feature = "std"))]
#[macro_use]
extern crate alloc;

mod certs;
mod internal_alloc;

pub use certs::{
    noxtls_certificate_chain_pem_to_der_blocks, noxtls_certificate_der_to_pem,
    noxtls_certificate_matches_hostname, noxtls_certificate_pem_to_der, noxtls_der_to_pem,
    noxtls_ec_private_key_der_to_pem_sec1, noxtls_ec_private_key_pem_to_der_sec1,
    noxtls_ed25519_private_key_from_pem_pkcs8, noxtls_ed25519_private_key_from_pkcs8_der,
    noxtls_ed25519_private_key_to_pem_pkcs8, noxtls_ed25519_private_key_to_pkcs8_der,
    noxtls_ed25519_public_key_from_pem_spki, noxtls_ed25519_public_key_from_spki_der,
    noxtls_ed25519_public_key_to_pem_spki, noxtls_ed25519_public_key_to_spki_der,
    noxtls_mldsa_public_key_from_spki_der, noxtls_mldsa_public_key_to_pem_spki,
    noxtls_mldsa_public_key_to_spki_der, noxtls_p256_private_key_from_pem_pkcs8,
    noxtls_p256_private_key_from_pem_sec1, noxtls_p256_private_key_from_pkcs8_der,
    noxtls_p256_private_key_from_sec1_der, noxtls_p256_private_key_to_pem_pkcs8,
    noxtls_p256_private_key_to_pkcs8_der, noxtls_p256_public_key_from_pem_spki,
    noxtls_p256_public_key_from_spki_der, noxtls_p256_public_key_to_pem_spki,
    noxtls_p256_public_key_to_spki_der, noxtls_p384_private_key_from_pem_pkcs8,
    noxtls_p384_private_key_from_pem_sec1, noxtls_p384_private_key_from_pkcs8_der,
    noxtls_p384_private_key_from_sec1_der, noxtls_p384_public_key_to_pem_spki,
    noxtls_p384_public_key_to_spki_der, noxtls_p521_private_key_from_pem_pkcs8,
    noxtls_p521_private_key_from_pem_sec1, noxtls_p521_private_key_from_pkcs8_der,
    noxtls_p521_private_key_from_sec1_der, noxtls_parse_certificate, noxtls_parse_der_length,
    noxtls_parse_der_node, noxtls_parse_ecdsa_p384_signature_der, noxtls_parse_ecdsa_signature_der,
    noxtls_parse_pkcs1_rsa_private_key_der, noxtls_parse_pkcs1_rsa_public_key_der,
    noxtls_parse_pkcs8_private_key_info_der, noxtls_parse_spki_public_key_info_der,
    noxtls_pem_to_der, noxtls_pem_to_der_blocks, noxtls_private_key_der_to_pem_pkcs8,
    noxtls_private_key_pem_to_der_pkcs8, noxtls_public_key_der_to_pem_spki,
    noxtls_public_key_pem_to_der_spki, noxtls_rsa_private_key_der_to_pem_pkcs1,
    noxtls_rsa_private_key_from_pem_pkcs1, noxtls_rsa_private_key_from_pem_pkcs8,
    noxtls_rsa_private_key_from_pkcs1_der, noxtls_rsa_private_key_from_pkcs8_der,
    noxtls_rsa_private_key_pem_to_der_pkcs1, noxtls_rsa_pss_private_key_from_pem_pkcs8,
    noxtls_rsa_pss_private_key_from_pkcs8_der, noxtls_rsa_public_key_der_to_pem_pkcs1,
    noxtls_rsa_public_key_from_pem_pkcs1, noxtls_rsa_public_key_from_pem_spki,
    noxtls_rsa_public_key_from_pkcs1_der, noxtls_rsa_public_key_from_spki_der,
    noxtls_rsa_public_key_pem_to_der_pkcs1, noxtls_rsa_public_key_to_pem_pkcs1,
    noxtls_rsa_public_key_to_pem_spki, noxtls_rsa_public_key_to_spki_der,
    noxtls_validate_certificate_chain, noxtls_validate_certificate_chain_constraints_only,
    noxtls_validate_certificate_chain_strict, noxtls_validate_certificate_chain_with_options,
    noxtls_verify_certificate_signature, noxtls_write_ca_issued_certificate_der,
    noxtls_write_csr_ed25519, noxtls_write_csr_mldsa65, noxtls_write_csr_p256_sha256,
    noxtls_write_csr_p384_sha384, noxtls_write_csr_rsa_sha256, noxtls_write_csr_with_extensions,
    noxtls_write_der_bit_string, noxtls_write_der_integer, noxtls_write_der_oid,
    noxtls_write_der_sequence, noxtls_write_minimal_certificate_der,
    noxtls_write_self_signed_certificate_ed25519, noxtls_write_self_signed_certificate_mldsa65,
    noxtls_write_self_signed_certificate_p256_sha256,
    noxtls_write_self_signed_certificate_p384_sha384,
    noxtls_write_self_signed_certificate_rsa_sha256,
    noxtls_write_self_signed_certificate_with_extensions, noxtls_x25519_private_key_from_pem_pkcs8,
    noxtls_x25519_private_key_from_pkcs8_der, noxtls_x25519_private_key_to_pem_pkcs8,
    noxtls_x25519_private_key_to_pkcs8_der, noxtls_x25519_public_key_from_pem_spki,
    noxtls_x25519_public_key_from_spki_der, noxtls_x25519_public_key_to_pem_spki,
    noxtls_x25519_public_key_to_spki_der, noxtls_x448_private_key_from_pem_pkcs8,
    noxtls_x448_private_key_from_pkcs8_der, noxtls_x448_private_key_to_pem_pkcs8,
    noxtls_x448_private_key_to_pkcs8_der, noxtls_x448_public_key_from_pem_spki,
    noxtls_x448_public_key_from_spki_der, noxtls_x448_public_key_to_pem_spki,
    noxtls_x448_public_key_to_spki_der, Certificate, DerNode, NoxtlsCertificateExtensions,
    NoxtlsCertificatePublicKey, NoxtlsCertificateSigner, Pkcs8PrivateKeyInfoDerParts,
    RsaPrivateKeyDerParts, RsaPublicKeyDerParts, SpkiPublicKeyInfoDerParts, ValidationError,
    ValidationOptions, ValidationReport, NOXTLS_X509_KEY_USAGE_CONTENT_COMMITMENT,
    NOXTLS_X509_KEY_USAGE_CRL_SIGN, NOXTLS_X509_KEY_USAGE_DATA_ENCIPHERMENT,
    NOXTLS_X509_KEY_USAGE_DIGITAL_SIGNATURE, NOXTLS_X509_KEY_USAGE_KEY_AGREEMENT,
    NOXTLS_X509_KEY_USAGE_KEY_CERT_SIGN, NOXTLS_X509_KEY_USAGE_KEY_ENCIPHERMENT,
};

#[cfg(feature = "std")]
pub use certs::{
    noxtls_der_to_file, noxtls_der_to_pem_file, noxtls_ed25519_private_key_from_pem_file_pkcs8,
    noxtls_ed25519_private_key_to_pem_file_pkcs8, noxtls_p256_private_key_from_pem_file_pkcs8,
    noxtls_p256_private_key_to_pem_file_pkcs8, noxtls_pem_file_to_der,
    noxtls_pem_file_to_der_blocks, noxtls_x25519_private_key_from_pem_file_pkcs8,
    noxtls_x25519_private_key_to_pem_file_pkcs8, noxtls_x448_private_key_from_pem_file_pkcs8,
    noxtls_x448_private_key_to_pem_file_pkcs8,
};