Struct AuthCert 

pub struct AuthCert {
    pub dir_key_certificate_version: AuthCertVersion,
    pub dir_address: Option<SocketAddrV4>,
    pub fingerprint: Fingerprint,
    pub dir_key_published: Iso8601TimeSp,
    pub dir_key_expires: Iso8601TimeSp,
    pub dir_identity_key: PublicKey,
    pub dir_signing_key: PublicKey,
    pub dir_key_crosscert: CrossCert,
    /* private fields */
}

A single directory authority key certificate

This is the body, not including signatures.

https://spec.torproject.org/dir-spec/creating-key-certificates.html

To make a fresh AuthCert, use AuthCertConstructor.

Fields

dir_key_certificate_version: AuthCertVersion

Intro line

Currently must be version 3.

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-key-certificate-version

dir_address: Option<SocketAddrV4>

An IPv4 address for this authority.

fingerprint: Fingerprint

H(KP_auth_id_rsa)

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:fingerprint

dir_key_published: Iso8601TimeSp

Declared time when this certificate was published

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-key-published

dir_key_expires: Iso8601TimeSp

Declared time when this certificate expires.

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-key-expires

dir_identity_key: PublicKey

KP_auth_id_rsa

The long-term RSA identity key for this authority

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-identity-key

dir_signing_key: PublicKey

KP_auth_sign_rsa

The medium-term RSA signing key for this authority

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-signing-key

dir_key_crosscert: CrossCert

SHA1(DER(KP_auth_id_rsa)) signed by KP_auth_sign_rsa

https://spec.torproject.org/dir-spec/creating-key-certificates.html#item:dir-key-crosscert

Implementations

impl AuthCert

pub fn builder() -> AuthCertBuilder

👎Deprecated:

use AuthCertConstructor instead

Make an AuthCertBuilder object that can be used to construct authority certificates for testing.

pub fn parse(s: &str) -> Result<UncheckedAuthCert>

Parse an authority certificate from a string.

This function verifies the certificate’s signatures, but doesn’t check its expiration dates.

pub fn parse_multiple( s: &str, ) -> Result<impl Iterator<Item = Result<UncheckedAuthCert>> + '_>

Return an iterator yielding authority certificates from a string.

pub fn signing_key(&self) -> &PublicKey

Return the signing key certified by this certificate.

pub fn key_ids(&self) -> AuthCertKeyIds

Return an AuthCertKeyIds object describing the keys in this certificate.

pub fn id_fingerprint(&self) -> &RsaIdentity

Return an RsaIdentity for this certificate’s identity key.

pub fn published(&self) -> SystemTime

Return the time when this certificate says it was published.

pub fn expires(&self) -> SystemTime

Return the time when this certificate says it should expire.

fn from_body( body: &Section<'_, AuthCertKwd>, s: &str, ) -> Result<UncheckedAuthCert>

Parse an authority certificate from a reader.

impl AuthCert

pub fn new_base( k_auth_id_rsa: &KeyPair, k_auth_sign_rsa: &KeyPair, published: SystemTime, expires: SystemTime, ) -> StdResult<Self, Bug>

Make the base for a new AuthCert

This contains only the mandatory fields (the ones in AuthCertConstructor). This method is an alternative to providing a AuthCertConstructor value display, and is convenient because an authcert contains much recapitulated information.

Example

use tor_netdoc::doc::authcert::AuthCert;
let (k_auth_id_rsa, k_auth_sign_rsa, published, expires) = todo!();
let authcert = AuthCert {
    dir_address: Some("192.0.2.17:7000".parse()?),
    ..AuthCert::new_base(&k_auth_id_rsa, &k_auth_sign_rsa, published, expires)?
};

pub fn encode_sign( &self, k_auth_id_rsa: &KeyPair, ) -> StdResult<EncodedAuthCert, Bug>

Encode this AuthCert and sign it with k_auth_id_rsa

Yields the string representation of the signed, encoded, document, as an EncodedAuthCert.

Trait Implementations

impl Clone for AuthCert

fn clone(&self) -> AuthCert

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthCert

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<AuthCert> for AuthCertUnverifiedParsedBody

fn from(value: AuthCert) -> Self

Converts to this type from the input type.

impl From<AuthCertConstructor> for AuthCert

fn from(constructor: AuthCertConstructor) -> AuthCert

Converts to this type from the input type.

impl HasUnverifiedParsedBody for AuthCert

type UnverifiedParsedBody = AuthCertUnverifiedParsedBody

The actual body payload.

fn unverified_into_inner_unchecked( unverified: Self::UnverifiedParsedBody, ) -> Self

Extract the payload

impl NetdocEncodable for AuthCert

fn encode_unsigned(&self, out: &mut NetdocEncoder) -> Result<(), Bug>

Append the document onto out