verifier

Documentation

Overview

Package verifier provides an implementation of notation.Verifier interface

Index

• Constants
• Variables
• func New(trustPolicy *trustpolicy.Document, trustStore truststore.X509TrustStore, ...) (notation.Verifier, error)
• func NewFromConfig() (notation.Verifier, error)
• func NewWithOptions(trustPolicy *trustpolicy.Document, trustStore truststore.X509TrustStore, ...) (notation.Verifier, error)
• type VerifierOptions

Constants

const (
	// HeaderVerificationPlugin specifies the name of the verification plugin
	// that should be used to verify the signature.
	HeaderVerificationPlugin = "io.cncf.notary.verificationPlugin"

	// HeaderVerificationPluginMinVersion specifies the minimum version of the
	// verification plugin that should be used to verify the signature.
	HeaderVerificationPluginMinVersion = "io.cncf.notary.verificationPluginMinVersion"
)

Variables

var VerificationPluginHeaders = []string{
	HeaderVerificationPlugin,
	HeaderVerificationPluginMinVersion,
}

VerificationPluginHeaders specifies headers of a verification plugin

Functions

func New

func New(trustPolicy *trustpolicy.Document, trustStore truststore.X509TrustStore, pluginManager plugin.Manager) (notation.Verifier, error)

New creates a new verifier given trustPolicy, trustStore and pluginManager

func NewFromConfig

func NewFromConfig() (notation.Verifier, error)

NewFromConfig returns a verifier based on local file system.

func NewWithOptions

func NewWithOptions(trustPolicy *trustpolicy.Document, trustStore truststore.X509TrustStore, pluginManager plugin.Manager, verifierOptions VerifierOptions) (notation.Verifier, error)

NewWithOptions creates a new verifier given trustPolicy, trustStore, pluginManager, and verifierOptions

Types

type VerifierOptions

type VerifierOptions struct {
	// RevocationClient is an implementation of revocation.Revocation to use for
	// verifying revocation of code signing certificate chain
	//
	// Deprecated: RevocationClient exists for backwards compatibility and
	// should not be used. To perform code signing certificate chain revocation
	// check, use [RevocationCodeSigningValidator].
	RevocationClient revocation.Revocation

	// RevocationCodeSigningValidator is used for verifying revocation of
	// code signing certificate chain with context.
	RevocationCodeSigningValidator revocation.Validator

	// RevocationTimestampingValidator is used for verifying revocation of
	// timestamping certificate chain with context.
	RevocationTimestampingValidator revocation.Validator
}

VerifierOptions specifies additional parameters that can be set when using the NewWithOptions constructor