pub struct SignatureVerifier<'a> { /* private fields */ }Expand description
Plugin signature verifier
Implementations§
Source§impl<'a> SignatureVerifier<'a>
impl<'a> SignatureVerifier<'a>
Sourcepub fn new(config: &'a PluginLoaderConfig) -> Self
pub fn new(config: &'a PluginLoaderConfig) -> Self
Create a new signature verifier
Sourcepub fn verify_plugin_signature(&self, plugin_dir: &Path) -> LoaderResult<()>
pub fn verify_plugin_signature(&self, plugin_dir: &Path) -> LoaderResult<()>
Verify a plugin’s signature
This function:
- Reads the signature file (
plugin.sig) - Rejects legacy, revoked, untrusted and expired keys
- Recomputes the artifact payload over every plugin file
- Verifies the signature over that payload with the trusted key
A missing signature passes only when allow_unsigned is set. A
signature that is present but invalid always fails.
Sourcepub fn verify_plugin_signature_at(
&self,
plugin_dir: &Path,
now: DateTime<Utc>,
) -> LoaderResult<()>
pub fn verify_plugin_signature_at( &self, plugin_dir: &Path, now: DateTime<Utc>, ) -> LoaderResult<()>
Self::verify_plugin_signature with an explicit clock, for
deterministic expiry checks.
Auto Trait Implementations§
impl<'a> Forget for SignatureVerifier<'a>
impl<'a> Freeze for SignatureVerifier<'a>
impl<'a> RefUnwindSafe for SignatureVerifier<'a>
impl<'a> Send for SignatureVerifier<'a>
impl<'a> Sync for SignatureVerifier<'a>
impl<'a> Unpin for SignatureVerifier<'a>
impl<'a> UnsafeUnpin for SignatureVerifier<'a>
impl<'a> UnwindSafe for SignatureVerifier<'a>
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
Source§impl<T> GetSetFdFlags for T
impl<T> GetSetFdFlags for T
Source§fn get_fd_flags(&self) -> Result<FdFlags, Error>where
T: AsFilelike,
fn get_fd_flags(&self) -> Result<FdFlags, Error>where
T: AsFilelike,
Query the “status” flags for the
self file descriptor.Source§fn new_set_fd_flags(&self, fd_flags: FdFlags) -> Result<SetFdFlags<T>, Error>where
T: AsFilelike,
fn new_set_fd_flags(&self, fd_flags: FdFlags) -> Result<SetFdFlags<T>, Error>where
T: AsFilelike,
Source§fn set_fd_flags(&mut self, set_fd_flags: SetFdFlags<T>) -> Result<(), Error>where
T: Sized + AsFilelike,
fn set_fd_flags(&mut self, set_fd_flags: SetFdFlags<T>) -> Result<(), Error>where
T: Sized + AsFilelike,
Set the “status” flags for the
self file descriptor. Read moreimpl<A, B, T> HttpServerConnExec<A, B> for Twhere
B: Body,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
Source§fn in_current_span(self) -> Instrumented<Self> ⓘ
fn in_current_span(self) -> Instrumented<Self> ⓘ
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more