Struct AuthCertUnverified 

pub struct AuthCertUnverified {
    body: AuthCert,
    pub sigs: SignaturesData<AuthCertUnverified>,
}

Signed (unverified) form of AuthCert

Embodies:

• AuthCert: document body
• AuthCertSignatures: signatures

If this type was parsed from a document text, the signatures have not yet been verified.

Use a .verify_... method to obtain useable, verified, contents.

Fields

body: AuthCert

The actual body

sigs: SignaturesData<AuthCertUnverified>

Signatures

Implementations

impl AuthCertUnverified

pub fn verify( self, v3idents: &[RsaIdentity], pre_tolerance: Duration, post_tolerance: Duration, now: SystemTime, ) -> StdResult<AuthCert, VerifyFailed>

Verifies the signature of a AuthCert

Algorithm

1. Check whether this comes from a valid authority in v3idents.
2. Check whether the timestamps are valid (± tolerance).
3. Check whether the fingerprint and long-term identity key match.
4. Check the cross-certificate (proof-of-ownership of signing key).
5. Check the outer certificate (proof-of-ownership of identity key).

TODO: Replace pre_tolerance and post_tolerance with tor_dircommon::config::DirTolerance which is not possible at the moment due to a circular dependency of tor-dircommon depending upon tor-netdoc.

TODO: Consider whether to try to deduplicate this signature checking somehow, wrt to UncheckedAuthCert.

pub fn verify_selfcert( self, now: SystemTime, ) -> StdResult<AuthCert, VerifyFailed>

Verify the signatures (and check validity times)

The pre and post tolerance (time check allowances) used are both zero.

Security considerations

The caller must check that the KP_auth_id is correct/relevant.

Trait Implementations

impl Clone for AuthCertUnverified

fn clone(&self) -> AuthCertUnverified

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthCertUnverified

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl NetdocParseable for AuthCertUnverified

fn doctype_for_error() -> &'static str

Document type for errors, normally its intro keyword

fn is_intro_item_keyword(kw: KeywordRef<'_>) -> bool

Is Keyword an intro Item Keyword for this kind of document?

fn is_structural_keyword(kw: KeywordRef<'_>) -> Option<IsStructural>

Is Keyword a structural keyword for this kind of document?

fn from_items<'s>( input: &mut ItemStream<'s>, outer_stop: StopAt<impl StopPredicate>, ) -> Result<AuthCertUnverified, ErrorProblem>

Parse the document from a stream of Items

impl NetdocUnverified for AuthCertUnverified

type Body = AuthCert

The body, ie not including the signatures

type Signatures = AuthCertSignatures

The signatures (the whole signature section)

fn inspect_unverified( &self, ) -> (&Self::Body, &SignaturesData<AuthCertUnverified>)

Inspect the document (and its signatures)

fn unwrap_unverified(self) -> (Self::Body, SignaturesData<AuthCertUnverified>)

Obtain the actual document (and signatures), without verifying

fn from_parts( body: Self::Body, sigs: SignaturesData<AuthCertUnverified>, ) -> Self

Construct a new NetdocUnverified from a body and signatures