Crate yubikey_signer 

YubiKey Signer Library

A self-contained library for code signing using YubiKey PIV certificates. Supports Authenticode PE signing with RFC 3161 timestamping. Requires OpenSSL for Windows-compatible Authenticode signatures.

Re-exports

pub use crate::domain::crypto::CertChain;

pub use crate::domain::crypto::CmsSignature;

pub use crate::domain::crypto::DigestBytes;

pub use crate::domain::crypto::DigestBytesError;

pub use crate::domain::crypto::EndEntityCert;

pub use crate::domain::crypto::IntermediateCert;

pub use crate::domain::pe::PeHashView;

pub use crate::domain::pe::PeRaw;

pub use crate::domain::spc::SpcIndirectData;

pub use crate::domain::types::HashData;

pub use crate::domain::types::PivPin;

pub use crate::domain::types::PivSlot;

pub use crate::domain::types::SecurePath;

pub use crate::domain::types::TimestampUrl;

pub use crate::infra::error::SigningError;

pub use crate::infra::error::SigningResult;

pub use crate::pipelines::sign::SignWorkflow;

pub use crate::adapters::yubikey::auth_bridge::sign_pe_file_with_yubikey_openssl;

pub use crate::adapters::yubikey::auth_bridge::sign_pe_with_yubikey_openssl;

pub use crate::adapters::yubikey::auth_bridge::YubiKeyAuthenticodeBridge;

pub use crate::adapters::yubikey::ops::YubiKeyOperations;

pub use crate::domain::verification::VerificationReport;

pub use crate::services::authenticode::OpenSslAuthenticodeSigner;

pub use crate::services::signing::Signer;

pub use crate::services::signing::SigningDetails;

pub use crate::services::signing::SigningOptions;

pub use crate::services::timestamp::TimestampClient;

pub use crate::pipelines::timestamp::TimestampWorkflow;

pub use crate::pipelines::verify::VerifyWorkflow;

Modules

adapters

Adapter layer modules for external system integration.

domain

infra

Infrastructure layer for cross-cutting concerns.

pipelines

Workflow pipelines orchestrating stateless services.

services

Service layer module root. Contains cryptographic services and signing implementations.

Structs

SigningConfig

Main signing configuration

Enums

HashAlgorithm

Supported hash algorithms

Functions

sign_pe_data

Signs PE data in-memory using a YubiKey.

sign_pe_file

Signs a PE file on disk using a YubiKey.