Module Conex

module Conex: sig .. end
Establish trust in community repositories

Conex is a library to verify and attest package release integrity and authenticity through the use of cryptographic signatures.

Each author cryptographically signs a list of resources (own public key, package releases) they vouch for. The repository is a map where resource digests are the key, and the set of warrantors the value. Verification of the signature is done via verify.

Given a logs and a verify implementation, this modules provides functionality to verify identities and packages. All functions require IO explicitly.

0.9.2 - homepage

module Make: 
functor (L : Conex_utils.LOGS-> 
functor (C : Conex_crypto.VERIFY-> sig .. end