Package dev.sigstore.rekor.client

Class RekorEntryFetcher

java.lang.Object

dev.sigstore.rekor.client.RekorEntryFetcher

public class RekorEntryFetcher
extends java.lang.Object

Compat fetcher of rekor entries for incomplete offline signature separates. Only useful to construct a complete Bundle from signature, artifact and certpath with no rekor entry provided.

Constructor Summary

Constructors

Constructor	Description
RekorEntryFetcher(java.util.List<RekorClient> rekorClients)

Method Summary

Modifier and Type	Method	Description
static RekorEntryFetcher	fromTrustedRoot(TrustedRootProvider trustedRootProvider)
static RekorEntryFetcher	fromTrustedRoot(java.nio.file.Path trustedRoot)
RekorEntry	getEntryFromRekor(byte[] artifactDigest, java.security.cert.X509Certificate leafCert, byte[] signature)
static RekorEntryFetcher	sigstorePublicGood()
static RekorEntryFetcher	sigstoreStaging()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RekorEntryFetcher

public RekorEntryFetcher(java.util.List<RekorClient> rekorClients)

Method Detail

sigstoreStaging

public static RekorEntryFetcher sigstoreStaging()
                                         throws java.security.InvalidAlgorithmParameterException,
                                                java.security.cert.CertificateException,
                                                java.security.spec.InvalidKeySpecException,
                                                java.security.NoSuchAlgorithmException,
                                                java.io.IOException,
                                                java.security.InvalidKeyException

Throws:

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.spec.InvalidKeySpecException

java.security.NoSuchAlgorithmException

java.io.IOException

java.security.InvalidKeyException

sigstorePublicGood

public static RekorEntryFetcher sigstorePublicGood()
                                            throws java.security.InvalidAlgorithmParameterException,
                                                   java.security.cert.CertificateException,
                                                   java.security.spec.InvalidKeySpecException,
                                                   java.security.NoSuchAlgorithmException,
                                                   java.io.IOException,
                                                   java.security.InvalidKeyException

Throws:

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.spec.InvalidKeySpecException

java.security.NoSuchAlgorithmException

java.io.IOException

java.security.InvalidKeyException

fromTrustedRoot

public static RekorEntryFetcher fromTrustedRoot(java.nio.file.Path trustedRoot)
                                         throws java.security.InvalidAlgorithmParameterException,
                                                java.security.cert.CertificateException,
                                                java.security.spec.InvalidKeySpecException,
                                                java.security.NoSuchAlgorithmException,
                                                java.io.IOException,
                                                java.security.InvalidKeyException

Throws:

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.spec.InvalidKeySpecException

java.security.NoSuchAlgorithmException

java.io.IOException

java.security.InvalidKeyException

fromTrustedRoot

public static RekorEntryFetcher fromTrustedRoot(TrustedRootProvider trustedRootProvider)
                                         throws java.security.InvalidAlgorithmParameterException,
                                                java.security.cert.CertificateException,
                                                java.security.spec.InvalidKeySpecException,
                                                java.security.NoSuchAlgorithmException,
                                                java.io.IOException,
                                                java.security.InvalidKeyException

Throws:

java.security.InvalidAlgorithmParameterException

java.security.cert.CertificateException

java.security.spec.InvalidKeySpecException

java.security.NoSuchAlgorithmException

java.io.IOException

java.security.InvalidKeyException

getEntryFromRekor

public RekorEntry getEntryFromRekor(byte[] artifactDigest,
                                    java.security.cert.X509Certificate leafCert,
                                    byte[] signature)
                             throws KeylessVerificationException

Throws:

KeylessVerificationException