verify_signed_sidecar

nixfleet_reconciler::verify

Function verify_signed_sidecar 

Source 
pub fn verify_signed_sidecar<T: SignedSidecar + DeserializeOwned>(
    signed_bytes: &[u8],
    signature: &[u8],
    trusted_keys: &[TrustedPubkey],
    now: DateTime<Utc>,
    freshness_window: Duration,
    reject_before: Option<DateTime<Utc>>,
) -> Result<Verified<T>, VerifyError>
Expand description

Verify any signed sidecar. trusted_keys tried in declaration order, first match wins; unsupported algorithms skipped silently for forward- compat. reject_before is strict < (equality accepted).