Struct PluginVerifier 

pub struct PluginVerifier { /* private fields */ }

Verifies plugin binaries against a configured set of trusted SHA-256 hashes.

Implementations

impl PluginVerifier

pub fn new() -> Self

Create a permissive verifier with no allowlist (loads with warnings).

pub fn with_trusted_hashes<I, S>(hashes: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

Create a strict verifier seeded with trusted hex-encoded SHA-256 hashes. Verification is required, so unknown binaries are refused.

pub fn set_require_verification(&mut self, require: bool)

Require verification: when true, a binary must be on the allowlist.

pub fn add_trusted_hash(&mut self, hash: &str)

Add a single trusted hex-encoded SHA-256 hash.

pub fn file_sha256(path: &Path) -> Result<String>

Compute the hex-encoded SHA-256 digest of a file.

pub fn verify(&self, path: &Path) -> Result<()>

Verify a plugin binary’s integrity before it is loaded.

Returns Ok(()) if the binary is trusted (or verification is not required and no allowlist is configured), and an error otherwise.

Trait Implementations

impl Clone for PluginVerifier

fn clone(&self) -> PluginVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PluginVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PluginVerifier

fn default() -> PluginVerifier

Returns the “default value” for a type.