tsp-ltv 0.1.0

Shared timestamping (RFC 3161) and long-term validation (OCSP, CRL, trust stores) infrastructure for AdES signatures
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Long-term validation (LTV) support.
//!
//! Provides OCSP, CRL, and certificate chain infrastructure for
//! long-term signature validation across all AdES formats.
//!
//! # Architecture
//!
//! - [`OcspClient`] — Fetches OCSP responses from responders
//! - [`CrlClient`] — Fetches and caches CRLs from distribution points
//! - [`ChainBuilder`] — Discovers intermediate certs via AIA extensions
//! - [`RevocationConfig`] — Configuration for concurrent OCSP + CRL checking
//!
//! # AdES Conformance Levels
//!
//! | Level | LTV Data |
//! |-------|----------|
//! | B-B   | None |
//! | B-T   | Timestamp only |
//! | B-LT  | Certs + OCSP + CRLs |
//! | B-LTA | Above + archive timestamp |

pub mod chain;
pub mod crl;
pub mod ocsp;
pub mod revocation;
pub mod status;
pub mod x509_ext;

// Re-exports
pub use chain::ChainBuilder;
pub use crl::CrlClient;
pub use ocsp::{
    OcspClient, AiaAccessMethod, extract_aia_urls,
    CertStatus, SingleResponse, ParsedBasicOcspResponse, ResponderId,
    build_ocsp_request_with_nonce, has_ocsp_nocheck_extension,
    parse_ocsp_response, check_revocation as ocsp_check_revocation,
};
pub use revocation::{RevocationConfig, check_certificate_revocation};
#[cfg(feature = "blocking")]
pub use revocation::check_certificate_revocation_blocking;
pub use status::{ValidationStatus, RevocationSource, RevocationReason, resolve_priority};
pub use x509_ext::{
    KeyUsageBits, CertRole,
    check_basic_constraints, check_key_usage, check_extended_key_usage,
    has_extension, validate_extensions_for_role,
};