cose

type Signer struct {
	// contains filtered or unexported fields
}

type Verifier struct {
	// ResolveAlgorithm resolves the signing algorithm used to verify the
	// signature according to the public key in the certificate chain.
	// If not present, `AlgorithmFromKey` will be used to pick up a recommended
	// algorithm.
	ResolveAlgorithm func(interface{}) (cose.Algorithm, error)

	// EnforceExpiryValidation enforces the verifier to verify the timestamp
	// signature even if the certificate is valid.
	// Reference: https://github.com/notaryproject/notaryproject/discussions/98
	EnforceExpiryValidation bool

	// VerifyOptions is the verify option to verify the certificate of the
	// incoming signature.
	// The `Intermediates` in the verify options will be ignored and
	// re-contrusted using the certificates in the incoming signature.
	// An empty list of `KeyUsages` in the verify options implies
	// `ExtKeyUsageAny`.
	VerifyOptions x509.VerifyOptions

	// TSAVerifyOptions is the verify option to verify the fetched timestamp
	// signature.
	// The `Intermediates` in the verify options will be ignored and
	// re-contrusted using the certificates in the fetched timestamp signature.
	// An empty list of `KeyUsages` in the verify options implies
	// `ExtKeyUsageTimeStamping`.
	TSAVerifyOptions x509.VerifyOptions
}