tsp-ltv 0.6.0

Shared timestamping (RFC 3161) and long-term validation (OCSP, CRL, trust stores) infrastructure for AdES signatures
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Long-term validation (LTV) support.
//!
//! Provides OCSP, CRL, and certificate chain infrastructure for
//! long-term signature validation across all AdES formats.
//!
//! # Architecture
//!
//! - [`OcspClient`] — Fetches OCSP responses from responders
//! - [`CrlClient`] — Fetches and caches CRLs from distribution points
//! - [`ChainBuilder`] — Discovers intermediate certs via AIA extensions
//! - [`RevocationConfig`] — Configuration for concurrent OCSP + CRL checking
//!
//! # AdES Conformance Levels
//!
//! | Level | LTV Data |
//! |-------|----------|
//! | B-B   | None |
//! | B-T   | Timestamp only |
//! | B-LT  | Certs + OCSP + CRLs |
//! | B-LTA | Above + archive timestamp |

pub mod chain;
pub mod crl;
pub mod name_constraints;
pub mod ocsp;
pub mod revocation;
pub mod status;
pub mod x509_ext;

// Re-exports
pub use chain::ChainBuilder;
pub use crl::CrlClient;
pub use ocsp::{
    build_ocsp_request_with_nonce, check_revocation as ocsp_check_revocation,
    check_revocation_detailed as ocsp_check_revocation_detailed, extract_aia_urls,
    has_ocsp_nocheck_extension, parse_ocsp_response, AiaAccessMethod, CertStatus, OcspCheckOutcome,
    OcspClient, OcspFreshness, ParsedBasicOcspResponse, ResponderId, SingleResponse,
};
#[cfg(feature = "blocking")]
pub use revocation::check_certificate_revocation_blocking;
pub use revocation::{check_certificate_revocation, RevocationConfig};
pub use status::{resolve_priority, RevocationReason, RevocationSource, ValidationStatus};
pub use x509_ext::{
    check_basic_constraints, check_extended_key_usage, check_key_usage, has_extension,
    validate_extensions_for_role, CertRole, KeyUsageBits,
};