Struct SigningIdentity 

pub struct SigningIdentity { /* private fields */ }

A private key together with the certificate chain that identifies it.

Constructors check that the key matches the leaf certificate, so a SigningIdentity can always produce verifiable signatures.

use apk::sign::SigningIdentity;

let identity = SigningIdentity::from_pem_file("release.pem")?;
println!("signing as {}", identity.certificate().subject());

Implementations

impl SigningIdentity

pub fn new(key: PrivateKey, chain: Vec<Certificate>) -> Result<Self, KeyError>

Pairs key with chain (leaf first).

pub fn from_pem(pem: &str) -> Result<Self, KeyError>

Parses a PEM bundle holding a private key (PRIVATE KEY, RSA PRIVATE KEY, or EC PRIVATE KEY) and one or more CERTIFICATEs.

pub fn from_encrypted_pem(pem: &str, password: &str) -> Result<Self, KeyError>

Like from_pem, also accepting an ENCRYPTED PRIVATE KEY (PKCS#8, PBES2) unlocked with password.

pub fn from_pem_file(path: impl AsRef<Path>) -> Result<Self, Error>

Reads a PEM bundle from a file.

pub fn from_der( private_key_pkcs8: &[u8], certificate: &[u8], ) -> Result<Self, KeyError>

Parses a PKCS#8 private key and a certificate, both DER-encoded.

pub fn key(&self) -> &PrivateKey

pub fn certificate(&self) -> &Certificate

The leaf certificate.

pub fn chain(&self) -> &[Certificate]

The certificate chain, leaf first.

Trait Implementations

impl Clone for SigningIdentity

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigningIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.