Modules
RFC 9421 HTTP Message Signatures: create and verify signatures over HTTP message components.
A covered-component identifier (RFC 9421 Section 2): an sf-string naming either a derived component or an HTTP field, plus optional parameters.
Error struct returned by all MessageSignatures functions.
Loads PEM-encoded keys into the {algorithm, key_material} pairs used
by signing and verification operations.
Resolves verification keys by keyid.
A transport-agnostic HTTP message used for signing and verification.
Replay-protection hook for verification.
Verifies RFC 9421 signatures on incoming requests.
A Req request step that signs outgoing requests per RFC 9421.
Builds the RFC 9421 §2.5 signature base — the exact byte string that is
signed and verified. This string is THE interop debugging artifact;
MessageSignatures.signature_base/3 exposes it publicly.
The covered components + signature parameters of one signature: the value
of a Signature-Input dictionary member, and (identically serialized)
the value of the @signature-params base line.
A successful verification: which signature verified, under which key and algorithm, and what it covered.