Re-exports§
pub use crl::CrlSource;pub use error::Result;pub use error::SignError;pub use generate::datetime_to_epoch;pub use generate::CertIdCompat;pub use generate::GenerationConfig;pub use generate::produce_bundle;pub use generate::produce_dual_bundle;pub use keyfile::demo_ecdsa_p256_key;pub use keyfile::load_ecdsa_p256_key;pub use keyfile::load_ml_dsa_key;pub use live::LiveCertStatus;pub use live::extract_status_from_response;pub use live::sign_live_response;pub use ml_dsa_bridge::ML_DSA_44_OID;pub use ml_dsa_bridge::ML_DSA_65_OID;pub use ml_dsa_bridge::ML_DSA_87_OID;pub use ml_dsa_bridge::MlDsaSignatureBytes;pub use ml_dsa_bridge::MlDsaSigner;pub use ml_dsa_bridge::MlDsaSignerVariant;pub use ml_dsa_bridge::load_ml_dsa_signer_from_pkcs8_der;pub use ml_dsa_bridge::ml_dsa_44_signer;pub use ml_dsa_bridge::ml_dsa_65_signer;pub use ml_dsa_bridge::ml_dsa_87_signer;pub use ml_dsa_bridge::ml_dsa_signature_size;pub use orchestrate::COMBINED_PRODUCER_ID;pub use orchestrate::PersistentSources;pub use orchestrate::SignedScope;pub use orchestrate::create_persistent_sources;pub use orchestrate::decode_issuer_key;pub use orchestrate::revoked_serials_for_scope;pub use orchestrate::sign_and_write_all;pub use orchestrate::sign_and_write_scope;pub use orchestrate::sign_ca_scope;pub use orchestrate::write_bundle;pub use rotation::CertInfo;pub use rotation::RotationStatus;pub use rotation::check_and_log_rotation;pub use rotation::check_rotation_needed;pub use rotation::format_cert_info;pub use rotation::run_rotation_command;pub use seal::SealKey;pub use seal::create_cms_seal;pub use seal::generate_seal_cert;pub use seal::generate_seal_cert_for_key;pub use source::CaIdentity;pub use source::CertificateStatus;pub use source::Epoch;pub use source::RevocationSource;pub use source::StatusChange;pub use source::StatusSnapshot;pub use verify::verify_ocsp_response_signature;
Modules§
- crl
- error
- generate
- keyfile
- Software key loading from PKCS#8 PEM/DER files.
- live
- On-demand OCSP response signing with a client-supplied nonce.
- ml_
dsa_ bridge - Bridge between ml-dsa (signature v3) and x509-ocsp (signature v2).
- orchestrate
- Bundle-production orchestration shared by the CLI signer loop and the admin signing API.
- rotation
- seal
- CMS SignedData seal creation for ahu bundles.
- source
- verify
- OCSP response signature verification.