rc_crypto::contentsignature

Function verify

Source
pub fn verify(
    input: &[u8],
    signature: &[u8],
    pem_bytes: &[u8],
    seconds_since_epoch: u64,
    root_sha256_hash: &str,
    hostname: &str,
) -> Result<()>
Expand description

Verify that the signature matches the input data.

The data must be prefixed with Content-Signature:\u{0}. The signature must be provided as base 64 url-safe encoded. The certificate chain, provided as PEM, must be valid at the provided current time. The root certificate content must match the provided root hash, and the leaf subject name must match the provided hostname.