Struct KeySet 

pub struct KeySet { /* private fields */ }

The signing keys a repository’s index and packages are verified against.

Obtained from the bundle with alpine or postmarketos, or assembled from a caller’s own keys with insert — which is also how a set is extended, since a repository publishing its own packages beside a distribution’s signs them with a key no bundle can know.

A set is the whole trust anchor for the repository it is attached to. An apk signing key is a bare RSA public key: it carries no expiry, no self-signature, and no revocation, so none of the validity rules an OpenPGP certificate is held to have an analogue here, and nothing narrows a set after it is built. A bundled set can only be refreshed by a release of this crate; a caller who needs a different answer sooner assembles one with insert.

Implementations

impl KeySet

pub fn new() -> KeySet

An empty key set, which accepts nothing.

pub fn alpine(architecture: &str) -> Result<KeySet, AlpineError>

The bundled Alpine keys that sign architecture.

Alpine does not sign every architecture with one key: alpine-keys installs three keys on x86_64, two entirely different ones on aarch64, two more on armv7, and so on, with only the two oldest of the eighteen serving more than one architecture. A signature made for x86_64 does not verify on an aarch64 root under apk, and it does not here either, so this is the set for one architecture rather than the whole bundle.

architecture is the repository’s, so it is always a real one — noarch is a property of a package rather than an archive a set can be built for.

Errors

Returns AlpineError::Config for an architecture the bundle holds no keys for, naming the ones it does. The architecture is not otherwise refused: a mirror may serve one this crate has never heard of, and the remedy is a set of the caller’s own rather than a newer release of this crate.

pub fn postmarketos() -> KeySet

The bundled postmarketOS signing key.

postmarketOS signs every architecture it publishes with one key, so this takes none.

pub fn insert( &mut self, name: impl Into<String>, pem: &str, ) -> Result<(), AlpineError>

Adds the PEM-encoded public key pem under name.

name is the file name the repository publishes the key under, which is what a signature member’s name carries — for example alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub, or the <name>.rsa.pub that abuild-sign writes for a repository of the caller’s own. A signature naming a key the set does not hold under exactly that name is refused, so the name matters as much as the bytes.

A key added under a name already present replaces it.

Errors

Returns AlpineError::Signature for a key that is not a PEM SubjectPublicKeyInfo holding an RSA public key.

pub fn names(&self) -> impl Iterator<Item = &str>

The names of the keys held, in order.

These are the names a signature is matched against, so this is what a caller inspects to see what a repository is trusted on.

pub fn is_empty(&self) -> bool

Whether the set holds no keys at all, and so accepts nothing.

Trait Implementations

impl Clone for KeySet

fn clone(&self) -> KeySet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Names the keys rather than rendering them. A public key’s modulus is bulky and says nothing a reader of a rendering can act on, while the names are exactly what a refused signature is diagnosed against.

impl Default for KeySet

fn default() -> KeySet

Returns the “default value” for a type.