pub struct Pki {
pub signing_key: String,
pub certificates: [CertificateUriChain; 4],
}
Expand description
Specification of PKI for secure (signed) boot.
Fields
signing_key: String
URI specifying the private RSA2K key used for signing firmware.
Currently, two options are supported
file:
path to PKCS #1 encoded PEM file containing private keypkcs11:
PKCS #11 URI (RFC 7512), with the extension thatpin-source
can beenv:PIN
.
Note that in PKCS #11 URIs, whitespace is stripped, and must be percent-encoded (%20
) if
it is significant, such as in token or object labels.
Examples:
file:/path/to/ca-0-private-key.pem
pkcs11:token=my-ca;object=signing-key;type=private?module-path=/usr/lib/libsofthsm2.so&pin-source=file:pin.txt
certificates: [CertificateUriChain; 4]
Paths to the four root certificates.
The appropriate certificate to include in signed firmware and containers is selected using the signing key’s public key.
Encoded as X.509 DER files.
Trait Implementations
sourceimpl<'de> Deserialize<'de> for Pki
impl<'de> Deserialize<'de> for Pki
sourcefn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
impl Eq for Pki
impl StructuralEq for Pki
impl StructuralPartialEq for Pki
Auto Trait Implementations
impl RefUnwindSafe for Pki
impl Send for Pki
impl Sync for Pki
impl Unpin for Pki
impl UnwindSafe for Pki
Blanket Implementations
sourceimpl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<Q, K> Equivalent<K> for Qwhere
Q: Eq + ?Sized,
K: Borrow<Q> + ?Sized,
impl<Q, K> Equivalent<K> for Qwhere
Q: Eq + ?Sized,
K: Borrow<Q> + ?Sized,
sourcefn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
Compare self to
key
and return true
if they are equal.