Package dev.sigstore.timestamp.client

Class TimestampVerifier

java.lang.Object

dev.sigstore.timestamp.client.TimestampVerifier

public class TimestampVerifier
extends Object

Method Summary

Modifier and Type	Method	Description
static TimestampVerifier	newTimestampVerifier(SigstoreTrustedRoot trustedRoot)
static TimestampVerifier	newTimestampVerifier(List<CertificateAuthority> tsas)
void	verify(TimestampResponse tsResp, byte[] artifact)	Verifies a timestamp response against the configured trusted Timestamp Authorities (TSAs).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

newTimestampVerifier

public static TimestampVerifier newTimestampVerifier(SigstoreTrustedRoot trustedRoot)
                                              throws InvalidAlgorithmParameterException,
CertificateException,
InvalidKeySpecException,
NoSuchAlgorithmException

Throws:

InvalidAlgorithmParameterException

CertificateException

InvalidKeySpecException

NoSuchAlgorithmException

newTimestampVerifier

public static TimestampVerifier newTimestampVerifier(List<CertificateAuthority> tsas)
                                              throws InvalidKeySpecException,
NoSuchAlgorithmException,
InvalidAlgorithmParameterException,
CertificateException

Throws:

InvalidKeySpecException

NoSuchAlgorithmException

InvalidAlgorithmParameterException

CertificateException

verify

public void verify(TimestampResponse tsResp,
 byte[] artifact)
            throws TimestampVerificationException

Verifies a timestamp response against the configured trusted Timestamp Authorities (TSAs).

Parameters:

tsResp - The timestamp response object containing the raw bytes of the RFC 3161 TimeStampResponse.

artifact - The artifact that was timestamped.

Throws:

TimestampVerificationException - if any verification step fails (e.g., no token, certificate path validation failure, signature validation failure).