pulp::authoring_capsule::SignatureVerifier Class Reference

#include <signature.hpp>

Public Member Functions
virtual	~SignatureVerifier ()=default
virtual runtime::Result< void, CapsuleError >	verify (const SignatureEnvelope &envelope, std::string_view computed_revision_digest) const =0
	Verify the envelope against the digest that was actually computed from the capsule, not against a digest the capsule asserts about itself.
virtual bool	is_revoked (std::string_view signer_id) const =0
	Has this signer been revoked?
virtual runtime::Result< void, CapsuleError >	check_floor (const VersionFloor &floor) const =0

Constructor & Destructor Documentation

~SignatureVerifier()

virtual pulp::authoring_capsule::SignatureVerifier::~SignatureVerifier ( )

virtualdefault

Member Function Documentation

check_floor()

virtual runtime::Result< void, CapsuleError > pulp::authoring_capsule::SignatureVerifier::check_floor ( const VersionFloor & floor ) const

pure virtual

is_revoked()

virtual bool pulp::authoring_capsule::SignatureVerifier::is_revoked ( std::string_view signer_id ) const

pure virtual

Has this signer been revoked?

A revoked signer is a distinct result from an invalid signature: the bytes are intact and the identity is real, which is exactly why the user needs to be told the difference.

verify()

virtual runtime::Result< void, CapsuleError > pulp::authoring_capsule::SignatureVerifier::verify ( const SignatureEnvelope & envelope, std::string_view computed_revision_digest ) const

pure virtual

Verify the envelope against the digest that was actually computed from the capsule, not against a digest the capsule asserts about itself.

---

The documentation for this class was generated from the following file:

• /home/runner/work/pulp/pulp/core/authoring_capsule/include/pulp/authoring_capsule/signature.hpp