Module boring

Available on crate features boring and crypto and std only.

Expand description

BoringSSL-backed self-signed certificate generation (feature boring).

Functions§

aki_from_ca_pubkey_keyid: Build an AuthorityKeyIdentifier extension whose keyIdentifier is derived from the CA’s public key per RFC 5280 §4.2.1.2 method (1): SHA-1 of the SubjectPublicKey BIT STRING contents. Used as a fallback when the CA certificate carries no SKI extension.
generate_certificate_authority
generate_certificate_authority_x509: Generate a self-signed certificate authority.
issue_certificate_authority_leaf
issue_leaf_certificate: Issue a server leaf using the supplied certificate authority.
self_signed_server_auth_mirror_cert: Generate a mirrored server certificate based on a source certificate.
self_signed_server_auth_mirror_cert_with_extensions: Like self_signed_server_auth_mirror_cert, additionally appending extra_extensions (e.g. proxy-hosted CRL/OCSP revocation pointers) to the re-signed leaf before signing.
signing_digest_for: Message digest to use when signing a certificate with key.