Function apple_codesign::non_apple_signed_expression

pub fn non_apple_signed_expression(
    signing_cert: &CapturedX509Certificate,
    chain: &[CapturedX509Certificate]
) -> Result<CodeRequirementExpression<'static>, AppleCodesignError>

Derive the requirements expression for non Apple signed certificates.

The signing certificate should be the first certificate in the passed chain. The chain should be sorted so the root CA is last.