Struct CertificateChain 

pub struct CertificateChain {
    pub certificates: Vec<CertificateInfo>,
}

Available on crate feature signatures only.

A certificate chain for validation.

Fields

certificates: Vec<CertificateInfo>

Certificates in the chain, from leaf to root.

Implementations

impl CertificateChain

pub fn new(certificates: Vec<CertificateInfo>) -> Self

Create a new certificate chain.

pub fn empty() -> Self

Create an empty certificate chain.

pub fn leaf(&self) -> Option<&CertificateInfo>

Get the leaf (end-entity) certificate.

pub fn root(&self) -> Option<&CertificateInfo>

Get the root certificate.

pub fn is_empty(&self) -> bool

Check if the chain is empty.

pub fn len(&self) -> usize

Get the number of certificates in the chain.

pub fn push(&mut self, cert: CertificateInfo)

Add a certificate to the chain.

pub fn validate_structure(&self) -> CertificateValidation

Validate the certificate chain structure (offline).

This performs basic structural validation:

• Chain is not empty
• Each certificate is issued by the next one in the chain
• Root certificate is self-signed
• CA certificates have the CA flag set

Note: This does NOT validate:

• Cryptographic signatures (requires parsing actual X.509)
• Expiration dates (requires current time)
• Revocation status (requires network)

pub fn validate_trust( &self, trusted_roots: &[CertificateInfo], ) -> CertificateValidation

Validate that the chain is trusted by the given trust anchors.

The chain’s root must match one of the trusted roots by fingerprint.

Trait Implementations

impl Clone for CertificateChain

fn clone(&self) -> CertificateChain

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateChain

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.