Struct TlsaRecord 

#[non_exhaustive]
pub struct TlsaRecord {
    pub usage: TlsaUsage,
    pub selector: TlsaSelector,
    pub matching_type: TlsaMatchingType,
    pub certificate_data: Vec<u8>,
}

A parsed TLSA record.

Format: _port._tcp.hostname IN TLSA usage selector matching_type certificate_data

Example: _443._tcp.agent.example.com IN TLSA 3 0 1 <sha256-fingerprint>

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

usage: TlsaUsage

Certificate usage (0-3)

selector: TlsaSelector

Selector (0=full cert, 1=SPKI)

matching_type: TlsaMatchingType

Matching type (0=exact, 1=SHA-256, 2=SHA-512)

certificate_data: Vec<u8>

Certificate association data (fingerprint or raw data)

Implementations

impl TlsaRecord

pub fn new( usage: TlsaUsage, selector: TlsaSelector, matching_type: TlsaMatchingType, certificate_data: Vec<u8>, ) -> Self

Create a new TLSA record from components.

pub fn from_rdata(rdata: &[u8]) -> Result<Self, DaneError>

Parse a TLSA record from raw RDATA bytes.

pub fn is_verifiable(&self) -> bool

Check if this TLSA record is in a format we can verify.

Currently only supports DANE-EE (usage=3), full certificate (selector=0), SHA-256 (matching_type=1) which is the ANS standard format.

pub fn matches_fingerprint( &self, cert_fingerprint: &CertFingerprint, ) -> Option<bool>

Check if this TLSA record matches a certificate fingerprint.

Currently only supports DANE-EE (usage=3), full certificate (selector=0), SHA-256 (matching_type=1) which is the ANS standard format.

Returns None if the record format is not supported (different from not matching).

Trait Implementations

impl Clone for TlsaRecord

fn clone(&self) -> TlsaRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsaRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for TlsaRecord

fn eq(&self, other: &TlsaRecord) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for TlsaRecord

impl StructuralPartialEq for TlsaRecord