Skip to main content

UpdateVerifier

Struct UpdateVerifier 

Source
pub struct UpdateVerifier { /* private fields */ }
Expand description

Verifies software update packages before installation.

Register one or more trusted publisher keys with register_publisher, then call verify for each candidate update. Failed verifications are automatically recorded in a supplied UpdateVerificationLog.

Implementations§

Source§

impl UpdateVerifier

Source

pub fn new() -> Self

Create a verifier with no trusted publishers.

Source

pub fn register_publisher(&mut self, publisher_id: &str, key: VerifyingKey)

Register a trusted publisher key.

Only updates signed by a registered publisher will pass verification.

Source

pub fn verify( &self, update: &SoftwareUpdate, payload: &[u8], publisher_id: &str, log: &mut UpdateVerificationLog, ) -> Result<(), UpdateVerifyError>

Verify update against payload and record the outcome in log.

Returns Ok(()) only when:

  • publisher_id is registered,
  • BLAKE3(payload) == update.payload_hash, and
  • the Ed25519 signature is valid.

Any failure appends a UpdateVerifyDecision::Rejected entry to log and returns the corresponding UpdateVerifyError.

Trait Implementations§

Source§

impl Debug for UpdateVerifier

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for UpdateVerifier

Source§

fn default() -> UpdateVerifier

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more