segverifier

Documentation

Overview

Package segverifier implements primitives for verifying path segments.

A Unit contains a path segment, and all the revocations that reference IFIDs in that path segment.

When a unit is verified, it spawns one goroutine for the path segment's verification, and one goroutine for the verification of each revocation. It then collects the results from all workers (forcefully terminating them if the unit's context is Done). A UnitResult object is returned, containing a reference to the Unit itself and a map of errors. The map only contains non-nil errors as values, and the keys are represented by the following:

• If the path segment verification failed, its error is contained at key -1
• If a revocation verification failed, its error is contained at key x, where x is the position of the revocation in the slice of SignedRevInfos passed to BuildVerificationUnits.

Index

• func StartVerification(ctx context.Context, store infra.TrustStore, server net.Addr, ...) (chan UnitResult, int)
• func Verify(ctx context.Context, store infra.TrustStore, server net.Addr, ...)
• func VerifyRevInfo(ctx context.Context, store infra.TrustStore, server net.Addr, ...) error
• func VerifySegment(ctx context.Context, store infra.TrustStore, server net.Addr, ...) error
• type ElemResult
• type RevVerificationFailed
• type RevVerified
• type SegVerificationFailed
• type SegVerified
• type Unit
  • func BuildUnits(segMetas []*seg.Meta, sRevInfos []*path_mgmt.SignedRevInfo) []*Unit
  • func (u *Unit) Len() int
  • func (u *Unit) Verify(ctx context.Context, store infra.TrustStore, server net.Addr, ...)
• type UnitResult
  • func (r *UnitResult) SegError() error

Functions

func StartVerification

func StartVerification(ctx context.Context, store infra.TrustStore, server net.Addr,
	segMetas []*seg.Meta, sRevInfos []*path_mgmt.SignedRevInfo) (chan UnitResult, int)

StartVerification builds the units for the given segMetas and sRevInfos and spawns verify method on the units. StartVerification returns a channel for the UnitResult and the expected amount of results.

func Verify

func Verify(ctx context.Context, store infra.TrustStore, server net.Addr, segMetas []*seg.Meta,
	sRevInfos []*path_mgmt.SignedRevInfo, verifiedSeg SegVerified, verifiedRev RevVerified,
	segError SegVerificationFailed, revError RevVerificationFailed)

Verify starts the verification for the given segMeta and sRevInfos. The verifiedSeg and verifiedRev callbacks are called for verified segs/revs. The segError/revError callbacks are called for verification errors.

func VerifyRevInfo

func VerifyRevInfo(ctx context.Context, store infra.TrustStore, server net.Addr,
	signedRevInfo *path_mgmt.SignedRevInfo) error

func VerifySegment

func VerifySegment(ctx context.Context, store infra.TrustStore, server net.Addr,
	segment *seg.Meta) error

Types

type ElemResult

type ElemResult struct {
	Index int
	Error error
}

type RevVerificationFailed

type RevVerificationFailed func(*path_mgmt.SignedRevInfo, error)

RevVerificationFailed is the callback for a failed revocation verification. The function must return immediately.

type RevVerified

type RevVerified func(context.Context, *path_mgmt.SignedRevInfo)

RevVerified is the callback for a successful revocation verification. The function must adhere to the given context.

type SegVerificationFailed

type SegVerificationFailed func(*seg.Meta, error)

SegVerificationFailed is the callback for a failed segment verification. The function must return immediately.

type SegVerified

type SegVerified func(context.Context, *seg.Meta)

SegVerified is the callback for a successful segment verification. The function must adhere to the given context.

type Unit

type Unit struct {
	SegMeta   *seg.Meta
	SRevInfos []*path_mgmt.SignedRevInfo
}

Unit contains multiple verification items.

func BuildUnits

func BuildUnits(segMetas []*seg.Meta,
	sRevInfos []*path_mgmt.SignedRevInfo) []*Unit

BuildUnits constructs one verification unit for each segment, together with its associated revocations.

func (*Unit) Len

func (u *Unit) Len() int

func (*Unit) Verify

func (u *Unit) Verify(ctx context.Context, store infra.TrustStore,
	server net.Addr, unitResults chan UnitResult)

Verify verifies a single unit, putting the results of verifications on unitResults.

type UnitResult

type UnitResult struct {
	Unit   *Unit
	Errors map[int]error
}

func (*UnitResult) SegError

func (r *UnitResult) SegError() error

SegError returns the verification error of the segment or nil if there was none.