Struct CaCerts 

pub struct CaCerts { /* private fields */ }

Registered CA certificates (trust anchors).

Implementations

impl CaCerts

pub fn from_certs<I, C>(certs: I) -> CaCerts

where I: IntoIterator<Item = C>, C: Into<Certificate>,

Builds a trust store from certificates.

Certificates the backend refuses are logged (with the SHA-1 thumbprint) and skipped.

pub fn from_certs_with<I, F>(certs: I) -> CaCerts

where I: IntoIterator<Item = (Certificate, F)>, F: FnOnce(&str),

Builds a trust store from certificates, each paired with an error handler.

The handler is called with the backend error if the certificate is refused; the certificate is then skipped. Duplicates are added once and their handler is not called. Lets callers report refusals with their own context (e.g. a configured name).

pub fn len(&self) -> usize

Number of registered certificates (duplicates are counted once).

pub fn is_empty(&self) -> bool

Returns true if no certificates are registered.

pub fn certs(&self) -> &[Certificate]

Registered certificates.

pub fn is_trusted( &self, peer: &PeerCerts, now: SystemTime, ) -> Result<SystemTime, TrustError>

Verifies the peer certificates against the registered CA certificates at time now.

Returns the earliest not_after of the verified path, see the module docs.

Errors

• TrustError::Unauthenticated if no CA certificates are registered or the peer certificate is rejected;
• TrustError::Internal if the verification could not be performed.

Trait Implementations

impl Debug for CaCerts

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for CaCerts

fn default() -> CaCerts

Returns the “default value” for a type.