sigstore-tsa 0.13.0

RFC 3161 Time-Stamp Protocol client for Sigstore
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

//! Error types for sigstore-tsa

use thiserror::Error;

/// Errors that can occur in TSA operations
#[derive(Error, Debug)]
pub enum Error {
    /// HTTP request error
    #[error("HTTP error: {0}")]
    Http(String),

    /// ASN.1 encoding/decoding error
    #[error("ASN.1 error: {0}")]
    Asn1(String),

    /// Timestamp verification error
    #[error("Timestamp verification error: {0}")]
    Verification(String),

    /// Invalid timestamp response
    #[error("Invalid timestamp response: {0}")]
    InvalidResponse(String),

    /// Failed to parse timestamp response
    #[error("Failed to parse timestamp response: {0}")]
    ParseError(String),

    /// Failed to verify timestamp signature
    #[error("Failed to verify timestamp signature: {0}")]
    SignatureVerificationError(String),

    /// Timestamp message hash does not match signature
    #[error("Timestamp message hash mismatch: expected {expected}, got {actual}")]
    HashMismatch { expected: String, actual: String },

    /// Timestamp response indicates failure status
    #[error("Timestamp response indicates failure status")]
    ResponseFailure,

    /// No timestamp token in response
    #[error("No timestamp token in response")]
    NoToken,

    /// No TSTInfo in timestamp token
    #[error("No TSTInfo in timestamp token")]
    NoTstInfo,

    /// Leaf certificate does not have TimeStamping EKU
    #[error("Leaf certificate does not have TimeStamping Extended Key Usage")]
    InvalidEKU,

    /// TSA certificate validation failed
    #[error("TSA certificate validation failed: {0}")]
    CertificateValidationError(String),

    /// Timestamp parsing error
    #[error("Timestamp parsing error: {0}")]
    Parse(String),

    /// The token is authentic, but its signed time falls outside the
    /// validity window of the timestamp authority that signed it
    #[error(
        "timestamp {time} is outside the validity period of the timestamp authority that signed it"
    )]
    TimestampOutsideValidity {
        /// The authenticated signed time of the token
        time: jiff::Timestamp,
    },
}

/// Result type for TSA operations
pub type Result<T> = std::result::Result<T, Error>;