Struct lpc55::pki::Pki

source · []
pub struct Pki {
    pub signing_key: String,
    pub certificates: [CertificateUriChain; 4],
}
Expand description

Specification of PKI for secure (signed) boot.

Fields

signing_key: String

URI specifying the private RSA2K key used for signing firmware.

Currently, two options are supported

  • file: path to PKCS #1 encoded PEM file containing private key
  • pkcs11: PKCS #11 URI (RFC 7512), with the extension that pin-source can be env:PIN.

Note that in PKCS #11 URIs, whitespace is stripped, and must be percent-encoded (%20) if it is significant, such as in token or object labels.

Examples:

  • file:/path/to/ca-0-private-key.pem
  • pkcs11:token=my-ca;object=signing-key;type=private?module-path=/usr/lib/libsofthsm2.so&pin-source=file:pin.txt
certificates: [CertificateUriChain; 4]

Paths to the four root certificates.

The appropriate certificate to include in signed firmware and containers is selected using the signing key’s public key.

Encoded as X.509 DER files.

Trait Implementations

Returns a copy of the value. Read more
Performs copy-assignment from source. Read more
Formats the value using the given formatter. Read more
Deserialize this value from the given Serde deserializer. Read more
This method tests for self and other values to be equal, and is used by ==. Read more
This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason. Read more
Serialize this value into the given Serde serializer. Read more
The type returned in the event of a conversion error.
Performs the conversion.

Auto Trait Implementations

Blanket Implementations

Gets the TypeId of self. Read more
Immutably borrows from an owned value. Read more
Mutably borrows from an owned value. Read more
Compare self to key and return true if they are equal.

Returns the argument unchanged.

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Should always be Self
The resulting type after obtaining ownership.
Creates owned data from borrowed data, usually by cloning. Read more
Uses borrowed data to replace owned data, usually by cloning. Read more
The type returned in the event of a conversion error.
Performs the conversion.
The type returned in the event of a conversion error.
Performs the conversion.