Function tugger_apple_codesign::derive_designated_requirements

pub fn derive_designated_requirements(
    cert: &CapturedX509Certificate, 
    identifier: Option<String>
) -> Result<Option<CodeRequirementExpression<'static>>, AppleCodesignError>

Derive a designated requirements expression given a code signing certificate.

This function figures out what the run-time requirements of a signed binary should be given its code signing certificate.

We determine the flavor of Apple code signing certificate in use and apply an appropriate requirements policy. We strive for behavior equivalence with Apple’s codesign tool.