Method signed_by

ra-tls/src/cert.rs:200–215

Signs the CSR data using the provided key pair. # Arguments `key` - The ECDSA key pair used to sign the CSR. # Returns The DER-encoded ECDSA signature as a byte vector. # Errors Returns an error if key pair creation or signing fails.

(&self, key: &KeyPair)

    /// # Errors
    /// Returns an error if key pair creation or signing fails.
    fn signed_by(&self, key: &KeyPair) -> Result<Vec<u8>> {
        let encoded = self.data_to_sign();
        let rng = SystemRandom::new();
        // Extract the DER-encoded private key and create an ECDSA key pair
        let key_pair =
            EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_ASN1_SIGNING, &key.serialize_der(), &rng)
                .context("Failed to create key pair from DER")?;

        // Sign the encoded CSR
        let signature = key_pair
            .sign(&rng, &encoded)
            .context("Failed to sign CSR")?
            .as_ref()
            .to_vec();
        Ok(signature)
    }

    /// Verifies the signature of the CSR.
    ///