Skip to main content

aki_from_ca_pubkey_keyid

rama::crypto::cert::boring

Function aki_from_ca_pubkey_keyid 

pub fn aki_from_ca_pubkey_keyid(
    ca_cert: &X509Ref,
) -> Result<X509Extension, Box<dyn Error + Send + Sync>>
Available on crate features boring and crypto and std only.
Expand description

Build an AuthorityKeyIdentifier extension whose keyIdentifier is derived from the CA’s public key per RFC 5280 §4.2.1.2 method (1): SHA-1 of the SubjectPublicKey BIT STRING contents. Used as a fallback when the CA certificate carries no SKI extension.