Struct CacheSigner 

pub struct CacheSigner { /* private fields */ }

Signs narinfo metadata with an ed25519 key pair.

Implementations

impl CacheSigner

pub fn new(key_name: String, secret_key: SigningKey) -> Self

Create a signer from a key name and raw 32-byte secret key.

pub fn generate(key_name: String) -> Self

Generate a new random signing key pair.

pub fn key_name(&self) -> &str

Return the key name.

pub fn public_key(&self) -> VerifyingKey

Return the public (verifying) key.

pub fn public_key_string(&self) -> String

Format the public key as keyname:base64pubkey for distribution.

pub fn secret_key_string(&self) -> String

Format the secret key as keyname:base64(secret||public) (Nix format).

Nix stores signing keys as 64 bytes: the 32-byte secret seed concatenated with the 32-byte public key, then base64-encoded.

pub fn from_secret_key_string(s: &str) -> Result<Self, CacheError>

Parse a secret key from the keyname:base64(secret||public) format.

Errors

Returns an error if the format is invalid or the base64 decoding fails.

pub fn sign_narinfo(&self, info: &NarInfo) -> String

Sign a narinfo and return the signature string (keyname:base64sig).

Trait Implementations

impl Debug for CacheSigner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.