Module internal 

Things that are only useful if you are doing your own API calling.

Note that the RFC calls inclusion proof “audit proof”.

Modules

leaf_hash_constructors

Turn some raw leaf data into leaf hash.

openssl_ffi

Because openssl crate is incomplete.

Structs

ConsistencyProofPart

A subtree hash provided by the server in a consistency proof.

FetchInclusionProofResult

Leaf

A parsed leaf.

Functions

check_consistency_proof

Fetch the consistency proof from prev_size to next_size from the server and verifies it, returning a Vec<ConsistencyProofPart> if successful, which can later be used to verify the integrity of certificates downloaded from the server later. An Err(...) is returned if the proof is invalid, or some network error happened during the request.

check_inclusion_proof

Fetch the required inclusion proof from the server and see if it convinces us that leaf_hash is in the tree with hash tree_hash and size tree_size. On success, return the index number of the leaf corresponding with the hash.

check_tree_head

Check, verify and return the latest tree head from the CT log at base_url.

consistency_proof_parts

Function used by verify_consistency_proof to construct a consistency proof client side (which is used to check against the server proof)

fetch_inclusion_proof

get_entries

Request leaf entries from the CT log. Does not verify if these entries are consistent with the tree or anything like that. Returns an iterator over the leaves.

get_json

Perform a GET request and parse the result as a JSON.

hash_inclusion_proof

Attempt to derive the root hash from the server provided inclusion proof and our calculated proof_parts.

inclusion_proof_parts

Returns an array of Range<u64>s. Each x..y denotes that this part of the proof should be the hash of the subtree formed by leafs with number [x, y).

new_http_client

Construct a new reqwest::Client to be used with the functions in this module. You don’t necessary need to use this.

verify_consistency_proof

Verify that the consistency proof given by server_provided_proof gets us from perv_root to next_root, returning an Ok(Vec<ConsistencyProofPart>) if the proof checks, otherwise a Err(String) describing why the proof is invalid.

verify_dss

Verifies a TLS digitally-signed struct (see the TLS RFC for more info.)

verify_dss_raw

Verifies a raw, ASN.1 encoded signature.