structured-ltv 0.12.0

Format-neutral long-term signature validation facts over PKIX, CMS and caller-owned sources
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Trusted metadata-only DER fixtures; no signature/path authentication claim.

use alloc::vec::Vec;
use structured_pkix::Version;

fn tlv(tag: u8, value: &[u8]) -> Vec<u8> {
    assert!(value.len() < 128, "fixture only writes short DER lengths");
    let mut result = alloc::vec![tag, u8::try_from(value.len()).unwrap()];
    result.extend_from_slice(value);
    result
}

fn algorithm() -> Vec<u8> {
    tlv(0x30, &tlv(6, &[42, 3]))
}
fn bits() -> Vec<u8> {
    tlv(3, &[0, 1])
}
fn name() -> Vec<u8> {
    tlv(
        0x30,
        &tlv(
            0x31,
            &tlv(0x30, &[tlv(6, &[0x55, 4, 3]), tlv(12, b"a")].concat()),
        ),
    )
}

pub(super) fn certificate(serial: u8, version: Version) -> Vec<u8> {
    let mut body = Vec::new();
    match version {
        Version::V1 => {}
        Version::V2 => body.extend(tlv(0xa0, &tlv(2, &[1]))),
        Version::V3 => body.extend(tlv(0xa0, &tlv(2, &[2]))),
    }
    body.extend(tlv(2, &[serial]));
    body.extend(algorithm());
    body.extend(name());
    body.extend(tlv(
        0x30,
        &[tlv(0x17, b"250101000000Z"), tlv(0x17, b"300101000000Z")].concat(),
    ));
    body.extend(name());
    body.extend(tlv(0x30, &[algorithm(), bits()].concat()));
    tlv(0x30, &[tlv(0x30, &body), algorithm(), bits()].concat())
}