Struct AuthCertSigned 

pub struct AuthCertSigned {
    pub signatures: AuthCertSignatures,
    /* private fields */
}

Signed (unverified) form of AuthCert

Embodies:

• AuthCert: document body
• AuthCertSignatures: signatures

If this type was parsed from a document text, the signatures have not yet been verified.

Use a .verify_... method to obtain useable, verified, contents.

Fields

signatures: AuthCertSignatures

Signatures

Implementations

impl AuthCertSigned

pub fn verify_self_signed( self, v3idents: &[RsaIdentity], pre_tolerance: Duration, post_tolerance: Duration, now: SystemTime, ) -> StdResult<AuthCert, VerifyFailed>

Available on crate feature parse2 only.

Verifies the signature of a AuthCert

Algorithm

1. Check whether this comes from a valid authority in v3idents.
2. Check whether the timestamps are valid (± tolerance).
3. Check whether the fingerprint and long-term identity key match.
4. Check the cross-certificate (proof-of-ownership of signing key).
5. Check the outer certificate (proof-of-ownership of identity key).

TODO: Replace pre_tolerance and post_tolerance with tor_dircommon::config::DirTolerance which is not possible at the moment due to a circular dependency of tor-dircommon depending upon tor-netdoc.

TODO: Consider whether to try to deduplicate this signature checking somehow, wrt to UncheckedAuthCert.

Trait Implementations

impl Clone for AuthCertSigned

fn clone(&self) -> AuthCertSigned

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthCertSigned

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl NetdocParseable for AuthCertSigned

fn doctype_for_error() -> &'static str

Available on crate feature parse2 only.

Document type for errors, normally its intro keyword

fn is_intro_item_keyword(kw: KeywordRef<'_>) -> bool

Available on crate feature parse2 only.

Is Keyword an intro Item Keyword for this kind of document?

fn from_items<'s>( input: &mut ItemStream<'s>, outer_stop: StopAt<impl StopPredicate>, ) -> Result<AuthCertSigned, ErrorProblem>

Available on crate feature parse2 only.

Parse the document from a stream of Items

impl NetdocSigned for AuthCertSigned

type Body = AuthCert

Available on crate feature parse2 only.

The body, ie not including the signatures

type Signatures = AuthCertSignatures

Available on crate feature parse2 only.

The signatures (the whole signature section)

fn inspect_unverified(&self) -> (&Self::Body, &Self::Signatures)

Available on crate feature parse2 only.

Inspect the document (and its signatures)

fn unwrap_unverified(self) -> (Self::Body, Self::Signatures)

Available on crate feature parse2 only.

Obtain the actual document (and signatures), without verifying

fn from_parts(body: Self::Body, signatures: Self::Signatures) -> Self

Available on crate feature parse2 only.

Construct a new NetdocSigned from a body and signatures