16 unstable releases (6 breaking)

0.7.0 Mar 4, 2025
0.6.1 Sep 10, 2024
0.6.0 Jun 14, 2024
0.5.0 Feb 23, 2024
0.2.0 Mar 7, 2023

#73 in Authentication

Download history 640/week @ 2024-12-08 497/week @ 2024-12-15 142/week @ 2024-12-22 275/week @ 2024-12-29 240/week @ 2025-01-05 298/week @ 2025-01-12 439/week @ 2025-01-19 447/week @ 2025-01-26 333/week @ 2025-02-02 510/week @ 2025-02-09 661/week @ 2025-02-16 292/week @ 2025-02-23 718/week @ 2025-03-02 388/week @ 2025-03-09 409/week @ 2025-03-16 207/week @ 2025-03-23

1,737 downloads per month
Used in 11 crates (8 directly)

LGPL-2.0-or-later

410KB
8K SLoC

An OpenPGP certificate store abstraction and implementation.

This crates provides a unified, high-level API for different certificate stores via the Store and StoreUpdate traits. It also provides a number of helper functions and data structures, like UserIDIndex to help implement this functionality. Finally, the CertStore data structure combines multiple certificate backends in a transparent way to users.

This crate supports multiple backends: CertD uses an OpenPGP Certificate Directory. Certs manages a bunch of certificates in-memory. It can be loaded with certificates from a keyring, a keybox, a database, etc. It can also be used as the basis for a new backend, which actually writes changes back to the underlying store. Pep provides access to a pEp certificate store. Finally, there is a key server backend, which can fetch certificates via HKPS and WKD.

Usage

To use sequoia-cert-store from your project, you should add the following to your crate's Cargo.toml:

[dependencies]
sequoia-cert-store = "0.7"
sequoia-openpgp = { version = "2", default-features = false }

To compile your crate you would then run:

$ cargo build --release --features sequoia-openpgp/crypto-default
$ cargo test --features sequoia-openpgp/crypto-default
$ cargo doc --no-deps --features sequoia-openpgp/crypto-default

If you do not disable the use of sequoia-openpgp's default features, then sequoia-openpgp will select the default cryptographic backend, and your users won't be able to easily compile your crate with a different cryptographic backend.

sequoia-openpgp currently uses Nettle as its default cryptographic backend. sequoia-openpgp also supports OpenSSL (sequoia-openpgp/crypto-openssl), Botan (sequoia-openpgp/crypto-botan), Windows CNG (sequoia-openpgp/crypto-cng), Rust Crypto (sequoia-openpgp/crypto-rust). For more information about building sequoia-openpgp, please refer to sequoia-openpgp's README. This also includes information about the different backends' build requirements.

License

sequoia-cert-store is distributed under the terms of LGPL 2.0 or later.

See LICENSE.txt and CONTRIBUTING.md for details.

Dependencies

~37–55MB
~1M SLoC