integrity

Mar 7, 2023

Changes in this version

type SignerOpt

+ func OptSignWithContext(ctx context.Context) SignerOpt

type VerifierOpt

+ func OptVerifyWithContext(ctx context.Context) VerifierOpt

Dec 14, 2022

Changes in this version

type SignerOpt

+ func OptSignWithSigner(ss ...signature.Signer) SignerOpt

type VerifierOpt

+ func OptVerifyWithVerifier(vs ...signature.Verifier) VerifierOpt

type VerifyResult

+ func (r VerifyResult) Keys() []crypto.PublicKey

Oct 3, 2022

Changes in this version

+ const PKIXOCSPNoCheck

+ func GetPKCS8Key(filepath string) (crypto.Signer, error)

+ type ChainedCertificates map[string]*x509.Certificate

+ func NewChainedCertificates(filepath string) (ChainedCertificates, error)

+ func (chain ChainedCertificates) AppendCertFromURLs(urls ...string) (ChainedCertificates, error)

+ func (chain ChainedCertificates) AppendCerts(certs ...*x509.Certificate) ChainedCertificates

+ func (chain ChainedCertificates) GetCertPool() *x509.CertPool

+ func (chain ChainedCertificates) GetCertificate() (*x509.Certificate, error)

+ func (chain ChainedCertificates) RevocationCheck(intermediateCerts, rootCerts ChainedCertificates) error

+ func (chain ChainedCertificates) Verify(intermediateCerts, rootCerts ChainedCertificates) error

+ type X509Signer struct

+ Certificate *x509.Certificate

+ Signer crypto.Signer

+ func GetX509Signer(privKeyPath string, certPath string) (*X509Signer, error)

Jan 18, 2022

Changes in this version

type SignerOpt

+ func OptSignDeterministic() SignerOpt

Dec 5, 2021

Changes in this version

+ var ErrHeaderIntegrity = errors.New("header integrity compromised")

+ var ErrNoKeyMaterial = errors.New("key material not provided")

+ type DescriptorIntegrityError struct

+ ID uint32

+ func (e *DescriptorIntegrityError) Error() string

+ func (e *DescriptorIntegrityError) Is(target error) bool

+ type ObjectIntegrityError struct

+ ID uint32

+ func (e *ObjectIntegrityError) Error() string

+ func (e *ObjectIntegrityError) Is(target error) bool

+ type SignatureNotFoundError struct

+ ID uint32

+ IsGroup bool

+ func (e *SignatureNotFoundError) Error() string

+ func (e *SignatureNotFoundError) Is(target error) bool

+ type SignatureNotValidError struct

+ Err error

+ ID uint32

+ func (e *SignatureNotValidError) Error() string

+ func (e *SignatureNotValidError) Is(target error) bool

+ func (e *SignatureNotValidError) Unwrap() error

+ type Signer struct

+ func NewSigner(f *sif.FileImage, opts ...SignerOpt) (*Signer, error)

+ func (s *Signer) Sign() error

+ type SignerOpt func(so *signOpts) error

+ func OptSignGroup(groupID uint32) SignerOpt

+ func OptSignObjects(ids ...uint32) SignerOpt

+ func OptSignWithEntity(e *openpgp.Entity) SignerOpt

+ func OptSignWithTime(fn func() time.Time) SignerOpt

+ type Verifier struct

+ func NewVerifier(f *sif.FileImage, opts ...VerifierOpt) (*Verifier, error)

+ func (v *Verifier) AllSignedBy() ([][]byte, error)

+ func (v *Verifier) AnySignedBy() ([][]byte, error)

+ func (v *Verifier) Verify() error

+ type VerifierOpt func(vo *verifyOpts) error

+ func OptVerifyCallback(cb VerifyCallback) VerifierOpt

+ func OptVerifyGroup(groupID uint32) VerifierOpt

+ func OptVerifyLegacy() VerifierOpt

+ func OptVerifyLegacyAll() VerifierOpt

+ func OptVerifyObject(id uint32) VerifierOpt

+ func OptVerifyWithKeyRing(kr openpgp.KeyRing) VerifierOpt

+ type VerifyCallback func(r VerifyResult) (ignoreError bool)

+ type VerifyResult struct

+ func (r VerifyResult) Entity() *openpgp.Entity

+ func (r VerifyResult) Error() error

+ func (r VerifyResult) Signature() sif.Descriptor

+ func (r VerifyResult) Verified() []sif.Descriptor