pub fn verify(
input: &[u8],
signature: &[u8],
pem_bytes: &[u8],
seconds_since_epoch: u64,
root_sha256_hash: &str,
hostname: &str,
) -> Result<()>
Expand description
Verify that the signature matches the input data.
The data must be prefixed with Content-Signature:\u{0}
.
The signature must be provided as base 64 url-safe encoded.
The certificate chain, provided as PEM, must be valid at the provided current time.
The root certificate content must match the provided root hash, and the leaf
subject name must match the provided hostname.