Package trustdb provides wrappers for SQL calls for managing a database containing TRCs and Certificate Chains.

NewBasicSigner creates a Signer that uses the supplied meta to sign messages.

NewBasicVerifier creates a new verifier.

NewStore initializes a TRC/Certificate Chain cache/resolver backed by db.

VerifyChain verifies the chain based on the TRCs present in the store.

HandlerTimeout is the handler lifetime.

MaxInFuture indicates the maximum time a timestamp may be in the future.

MaxPldAge indicates the maximum age of a control payload signature.

ErrChainVerification indicates the chain verification failed.

ErrInvalidResponse indicates an invalid response was received.

ErrMissingAuthoritative indicates that eventhough the trust store is authoritative for the requested object, it wasn't found.

ErrNotFound indicates that a chain or TRC was not found even after a network lookup.

ErrNotFoundLocally indicates that a chain or TRC was not found locally.

ErrParse indicates the trust material could not be parsed.

BasicSigner is a simple implementation of Signer.

BasicVerifier is a verifier that ignores signatures on cert_mgmt.TRC and cert_mgmt.Chain messages, to avoid dependency cycles.

Store manages requests for TRC and Certificate Chain objects.