Struct Ed25519Cert

pub struct Ed25519Cert {
    pub(crate) exp_hours: u32,
    pub(crate) cert_type: CertType,
    pub(crate) cert_key: CertifiedKey,
    pub(crate) extensions: Vec<CertExt>,
    pub(crate) signed_with: Option<Ed25519Identity>,
}

Structure for an Ed25519-signed certificate as described in Tor’s cert-spec.txt.

Fields

exp_hours: u32

How many hours after the epoch will this certificate expire?

cert_type: CertType

Type of the certificate; recognized values are in certtype::*

cert_key: CertifiedKey

The key or object being certified.

extensions: Vec<CertExt>

A list of extensions.

signed_with: Option<Ed25519Identity>

The key that signed this cert.

Once the cert has been unwrapped from an KeyUnknownCert, this field will be set. If there is a SignedWithEd25519 extension in self.extensions, this will match it.

Implementations

impl Ed25519Cert

pub fn constructor() -> Ed25519CertConstructor

Available on crate feature encode only.

Return a new Ed25519CertConstructor to create and return a new signed Ed25519Cert.

impl Ed25519Cert

pub fn decode(cert: &[u8]) -> BytesResult<KeyUnknownCert>

Try to decode a certificate from a byte slice.

This function returns an error if the byte slice is not completely exhausted.

Note that the resulting KeyUnknownCertificate is not checked for validity at all: you will need to provide it with an expected signing key, then check it for timeliness and well-signedness.

pub fn expiry(&self) -> SystemTime

Return the time at which this certificate becomes expired

pub fn is_expired_at(&self, when: SystemTime) -> bool

Return true iff this certificate will be expired at the time when.

pub fn subject_key(&self) -> &CertifiedKey

Return the signed key or object that is authenticated by this certificate.

pub fn signing_key(&self) -> Option<&Ed25519Identity>

Return the ed25519 key that signed this certificate.

pub fn cert_type(&self) -> CertType

Return the type of this certificate.

Trait Implementations

impl Clone for Ed25519Cert

fn clone(&self) -> Ed25519Cert

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Ed25519Cert

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Timebound<Ed25519Cert> for Ed25519Cert

type Error = TimeValidityError

An error type that’s returned when the object is not timely.

fn is_valid_at(&self, t: &SystemTime) -> Result<(), Self::Error>

Check whether this object is valid at a given time.

fn dangerously_assume_timely(self) -> Ed25519Cert

Return the underlying object without checking whether it’s valid.

fn check_valid_at(self, t: &SystemTime) -> Result<T, Self::Error>

Unwrap this Timebound object if it is valid at a given time.

fn check_valid_now(self) -> Result<T, Self::Error>

Unwrap this Timebound object if it is valid now.

fn check_valid_at_opt(self, t: Option<SystemTime>) -> Result<T, Self::Error>

Unwrap this object if it is valid at the provided time t. If no time is provided, check the object at the current time.

impl Timebound<Ed25519Cert> for SigCheckedCert

type Error = TimeValidityError

An error type that’s returned when the object is not timely.

fn is_valid_at(&self, t: &SystemTime) -> Result<(), Self::Error>

Check whether this object is valid at a given time.

fn dangerously_assume_timely(self) -> Ed25519Cert

Return the underlying object without checking whether it’s valid.

fn check_valid_at(self, t: &SystemTime) -> Result<T, Self::Error>

Unwrap this Timebound object if it is valid at a given time.

fn check_valid_now(self) -> Result<T, Self::Error>

Unwrap this Timebound object if it is valid now.

fn check_valid_at_opt(self, t: Option<SystemTime>) -> Result<T, Self::Error>

Unwrap this object if it is valid at the provided time t. If no time is provided, check the object at the current time.