dsse

Documentation

Index

• Constants
• type Envelope
  • func Sign(bodyType string, body io.Reader, signers ...cryptoutil.Signer) (Envelope, error)
  • func (e Envelope) Verify(opts ...VerificationOption) ([]cryptoutil.Verifier, error)
• type ErrNoMatchingSigs
  • func (e ErrNoMatchingSigs) Error() string
• type ErrNoSignatures
  • func (e ErrNoSignatures) Error() string
• type Signature
• type VerificationOption
  • func WithIntermediates(intermediates []*x509.Certificate) VerificationOption
  • func WithRoots(roots []*x509.Certificate) VerificationOption
  • func WithVerifiers(verifiers []cryptoutil.Verifier) VerificationOption

Constants

const PemTypeCertificate = "CERTIFICATE"

Types

type Envelope

type Envelope struct {
	Payload     []byte      `json:"payload"`
	PayloadType string      `json:"payloadType"`
	Signatures  []Signature `json:"signatures"`
}

func Sign

func Sign(bodyType string, body io.Reader, signers ...cryptoutil.Signer) (Envelope, error)

TODO: it'd be nice to break some of this logic out of what should be a presentation layer only

func (Envelope) Verify

func (e Envelope) Verify(opts ...VerificationOption) ([]cryptoutil.Verifier, error)

type ErrNoMatchingSigs

type ErrNoMatchingSigs struct{}

func (ErrNoMatchingSigs) Error

func (e ErrNoMatchingSigs) Error() string

type ErrNoSignatures

type ErrNoSignatures struct{}

func (ErrNoSignatures) Error

func (e ErrNoSignatures) Error() string

type Signature

type Signature struct {
	KeyID         string   `json:"keyid"`
	Signature     []byte   `json:"sig"`
	Certificate   []byte   `json:"certificate,omitempty"`
	Intermediates [][]byte `json:"intermediates,omitempty"`
}

type VerificationOption

type VerificationOption func(*verificationOptions)

func WithIntermediates

func WithIntermediates(intermediates []*x509.Certificate) VerificationOption

func WithRoots

func WithRoots(roots []*x509.Certificate) VerificationOption

func WithVerifiers

func WithVerifiers(verifiers []cryptoutil.Verifier) VerificationOption