Struct SecurityPolicy 

pub struct SecurityPolicy {
    pub require_signature: bool,
    pub require_encryption: bool,
}

Message-level protections a profile layer requires.

This is independent of InteropMode

Neither the interop-strict Cargo feature nor InteropMode::Strict implies a strict security policy. Interop mode governs header handling and ambiguity tolerance; SecurityPolicy governs whether messages must be signed and encrypted. A profile can be InteropMode::Strict and still resolve to require_encryption: false — the two axes never constrain each other.

What does constrain the security axis is the profile’s security floor, which ProfileStack::validate enforces against every resolved layer.

Lattice ordering

A policy is stronger than another when it requires everything the other requires and possibly more. Self::satisfies is that partial order, Self::strengthen its join, and Self::weaken its meet. Both defaults are true, so the fail-closed policy is also the strongest one.

use asx_rs::interop::{SecurityPolicy, SecurityRequirement};

let floor = SecurityPolicy::SIGN_AND_ENCRYPT;
let partner = SecurityPolicy::SIGN_ONLY;

assert!(!partner.satisfies(floor));
assert_eq!(floor.unmet_by(partner), vec![SecurityRequirement::Encryption]);

Fields

require_signature: bool

require_encryption: bool

Implementations

impl SecurityPolicy

pub const SIGN_AND_ENCRYPT: Self

Sign and encrypt — the fail-closed policy, and what Default::default yields.

Mandated by PEPPOL, CEF eDelivery and BDEW AS4-Profil v1.2 §2.2.6.2.2, so it is also the default security floor.

pub const SIGN_ONLY: Self

Signature required, encryption optional.

pub const ENCRYPT_ONLY: Self

Encryption required, signature optional.

pub const UNCONSTRAINED: Self

Neither protection required.

Only meaningful as a floor (meaning “impose nothing beyond the per-layer checks”). As an effective policy it is rejected by ProfileStack::validate with ProfileValidationCode::NoCriticalSecurityInvariant.

pub fn requires(self, requirement: SecurityRequirement) -> bool

Whether this policy requires requirement.

pub fn satisfies(self, floor: Self) -> bool

Whether this policy is at least as strong as floor.

pub fn unmet_by(self, candidate: Self) -> Vec<SecurityRequirement>

Requirements that self (as a floor) demands but candidate does not provide, in declaration order.

Empty exactly when candidate.satisfies(self).

pub fn relaxations_to(self, next: Self) -> Vec<SecurityRequirement>

Requirements that self demands but next drops — the monotonicity violations of a self -> next transition, in declaration order.

Empty exactly when next is at least as strong as self.

pub fn strengthen(self, other: Self) -> Self

Lattice join: require everything either policy requires.

Used to combine a BaseProfile::security_floor with a deployment-imposed floor from ProfileValidationOptions — the stricter of the two wins per requirement.

pub fn weaken(self, other: Self) -> Self

Lattice meet: require only what both policies require.

Trait Implementations

impl Clone for SecurityPolicy

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SecurityPolicy

impl Debug for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SecurityPolicy

impl PartialEq for SecurityPolicy

fn eq(&self, other: &SecurityPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SecurityPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecurityPolicy