Struct ClientIdentity 

pub struct ClientIdentity { /* private fields */ }

Outbound TLS client identity, see the module docs.

Implementations

impl ClientIdentity

pub fn from_der( certificates: &[&[u8]], private_key: &[u8], ) -> Result<ClientIdentity, Error>

Loads a leaf-first DER certificate list and an unencrypted PKCS#8 key.

Errors

See Identity::from_der. The resulting chain omits the self-signed root.

pub fn from_pem( certificates: &[u8], private_key: &[u8], ) -> Result<ClientIdentity, Error>

Loads PEM certificates and an unencrypted PKCS#8 key, without persisting native keys.

Errors

See Identity::from_pem.

pub fn load(source: &IdentitySource) -> Result<ClientIdentity, Error>

Loads the client identity.

Errors

See IdentitySource::load; on Windows also Error::Backend if the chain cannot be built and Error::Unsupported for key algorithms other than RSA and EC P-256/384/521. On Unix, Error::InvalidIdentity if an issuer certificate or public key cannot be decoded.

pub fn from_pkcs12(der: &[u8], password: &str) -> Result<ClientIdentity, Error>

Parses a DER PKCS#12 archive; on Windows the key is imported into CNG without persisting.

Errors

Error::InvalidDer if the input is not a PKCS#12 archive, Error::InvalidIdentity if the archive cannot be decrypted, has no key, or an issuer certificate or public key cannot be decoded (Unix), Error::Unsupported for unsupported key algorithms or unavailable PKCS#12 loading.

pub fn from_identity(id: Identity) -> Result<ClientIdentity, Error>

Converts an identity into a leaf-first client chain without a self-signed root.

Errors

See Identity::ordered_chain.

pub fn cert(&self) -> &Certificate

Leaf certificate.

pub fn chain(&self) -> &[Certificate]

Leaf first, then intermediates in issuer order; the self-signed root is not included.

pub fn private_key(&self) -> &PrivateKey

Portable signing key; native keys need not be exportable.

pub fn private_key_pkcs8_der(&self) -> &[u8]

PKCS#8 DER private key (non-Windows compatibility accessor). Never log it.

Trait Implementations

impl Clone for ClientIdentity

fn clone(&self) -> ClientIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.