Module boring

Available on crate features boring and crypto and std only.

Expand description

BoringSSL-backed self-signed certificate generation (feature boring).

Functions§

aki_from_ca_pubkey_keyid: Build an AuthorityKeyIdentifier extension whose keyIdentifier is derived from the CA’s public key per RFC 5280 §4.2.1.2 method (1): SHA-1 of the SubjectPublicKey BIT STRING contents. Used as a fallback when the CA certificate carries no SKI extension.
self_signed_server_auth_gen_ca: Generate a self-signed server CA from the given SelfSignedData.
self_signed_server_auth_gen_cert: Generate a server cert for the SelfSignedData using the given CA Cert + Key.
self_signed_server_auth_mirror_cert: Generate a mirrored server certificate based on a source certificate.
self_signed_server_auth_mirror_cert_with_extensions: Like self_signed_server_auth_mirror_cert, additionally appending extra_extensions (e.g. proxy-hosted CRL/OCSP revocation pointers) to the re-signed leaf before signing.
signing_digest_for: Message digest to use when signing a certificate with key.