pe-sign 0.1.10

pe-sign is a cross-platform tool developed in Rust, designed for parsing and verifying digital signatures in PE files. It provides a simple command-line interface that supports extracting certificates, verifying digital signatures, calculating Authenticode digests, and printing certificate information.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

use std::fmt::Display;

use der::oid::{db::rfc5280::ID_CE_AUTHORITY_KEY_IDENTIFIER, AssociatedOid, ObjectIdentifier};

use crate::utils::{DisplayBytes, IndentString, OptionInto};

use super::name::GeneralNames;

#[derive(Clone, Debug, Eq, PartialEq)]
pub struct AuthorityKeyIdentifier {
    pub key_identifier: Option<Vec<u8>>,
    pub authority_cert_issuer: Option<GeneralNames>,
    pub authority_cert_serial_number: Option<Vec<u8>>,
}

impl AssociatedOid for AuthorityKeyIdentifier {
    const OID: ObjectIdentifier = ID_CE_AUTHORITY_KEY_IDENTIFIER;
}

impl From<x509_cert::ext::pkix::AuthorityKeyIdentifier> for AuthorityKeyIdentifier {
    fn from(value: x509_cert::ext::pkix::AuthorityKeyIdentifier) -> Self {
        Self {
            key_identifier: value
                .key_identifier
                .and_then(|v| Some(v.as_bytes().to_vec())),
            authority_cert_issuer: value.authority_cert_issuer.opt_into(),
            authority_cert_serial_number: value
                .authority_cert_serial_number
                .and_then(|v| Some(v.as_bytes().to_vec())),
        }
    }
}

impl Display for AuthorityKeyIdentifier {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        let skid = match &self.key_identifier {
            Some(kid) => kid.to_bytes_string(),
            None => match &self.authority_cert_issuer {
                Some(aci) => aci.to_string(),
                None => match &self.authority_cert_serial_number {
                    Some(sn) => sn.to_bytes_string(),
                    None => "None".to_owned(),
                },
            },
        };

        writeln!(f, "Authority Key Identifier:")?;
        write!(f, "{}", skid.indent(4))
    }
}