Encodes this certificate identifier into a DER-encoded string.
Verifies the signature
for the data
using a public key pkey
. Unlike verify
, this method will not hash data
with digest
automatically.
Returns true
if the signature is successfully verified, false
otherwise. The caller must check the return value.
See sign_raw
for the signing operation and an example code.
Added in version 3.0. See also the man page EVP_PKEY_verify(3).
signature
A String
containing the signature to be verified.
Returns the Response
in DER-encoded form.
Returns time when this timestamp token was created. If status is GRANTED or GRANTED_WITH_MODS, this is never nil
.
Returns the TokenInfo
in DER-encoded form.
Specify whether the response shall contain the timestamp authority’s certificate or not. The default value is true
.
Indicates whether the response shall contain the timestamp authority’s certificate or not.
DER-encodes this Request
.
Creates a Response
with the help of an OpenSSL::PKey
, an OpenSSL::X509::Certificate
and a Request
.
Mandatory parameters for timestamp creation that need to be set in the Request:
Mandatory parameters that need to be set in the Factory:
In addition one of either Request#policy_id
or Factory#default_policy_id
must be set.
Raises a TimestampError
if creation fails, though successfully created error responses may be returned.
General callback for OpenSSL
verify
Adds path as the hash dir to be looked up by the store.
See also the man page X509_LOOKUP_hash_dir(3).
Adds the OpenSSL::X509::Certificate
cert to the certificate store.
See also the man page X509_STORE_add_cert(3).
@api private