Crate uselesskey_core_x509 

Deprecated compatibility shim for X.509 policy helpers.

Prefer uselesskey-x509; the canonical implementation now lives there.

Structs

ChainSpec

Specification for generating a three-level X.509 certificate chain (root CA -> intermediate CA -> leaf).

KeyUsage

Key usage flags for X.509 certificates.

X509Spec

Specification for generating an X.509 certificate.

Enums

ChainNegative

Types of invalid certificate chains for negative testing.

NotBeforeOffset

Offset for the not_before field.

X509Negative

Types of invalid X.509 certificates for negative testing.

Constants

BASE_TIME_EPOCH_UNIX

2025-01-01T00:00:00Z used as the deterministic X.509 epoch.

BASE_TIME_WINDOW_DAYS

Number of days in the deterministic base-time window.

SERIAL_NUMBER_BYTES

Fixed serial-number byte length for deterministic certificate/CRL serials.

Functions

deterministic_base_time

Deterministic base time from a pre-configured BLAKE3 hasher.

deterministic_base_time_from_parts

Compute deterministic base time from length-prefixed identity parts.

deterministic_serial_number

Deterministic serial number derived from seed material.

write_len_prefixed

Write a length-prefixed byte slice into a BLAKE3 hasher.