Documentation
¶
Overview ¶
Package verify provides signature verification types and logic (Fetcher, VerifyWithFetcher).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Fetcher ¶
type Fetcher interface {
PullSignatures(ctx context.Context, recordRef *corev1.RecordRef) ([]*signv1.Signature, error)
PullPublicKeys(ctx context.Context, recordRef *corev1.RecordRef) ([]string, error)
}
Fetcher supplies signatures and public keys for a record.
type PerSignatureResult ¶
type PerSignatureResult struct {
SignerKey string
Status string // "verified" or "failed"
SignerInfo *signv1.SignerInfo
}
PerSignatureResult is the verification result for one signer (for DB cache).
func VerifyWithFetcher ¶
func VerifyWithFetcher(ctx context.Context, req *signv1.VerifyRequest, fetcher Fetcher) (*signv1.VerifyResponse, []PerSignatureResult, error)
VerifyWithFetcher runs signature verification using the given fetcher and returns the response plus per-signature results. Used by Client.Verify (with the client as Fetcher) and by the reconciler (with a store Fetcher).
Click to show internal directories.
Click to hide internal directories.