Enum SeedTls 

pub enum SeedTls {
    WebPki,
    PinnedSha256([u8; 32]),
    PinnedSpki([u8; 32]),
}

How an https:// Seed is authenticated.

Variants

WebPki

Public-CA verification (a Seed behind a CA-issued certificate).

PinnedSha256([u8; 32])

Accept exactly the leaf certificate with this SHA-256 (DER).

PinnedSpki([u8; 32])

Accept any leaf certificate whose SubjectPublicKeyInfo (DER) has this SHA-256. Survives certificate renewal under the same key.

Implementations

impl SeedTls

pub fn pinned(fingerprint: &str) -> Result<Self, RuntimeError>

Parse sha256:<64 hex> (colons between byte pairs allowed, as openssl x509 -fingerprint -sha256 prints them).

pub fn pinned_spki(fingerprint: &str) -> Result<Self, RuntimeError>

Parse spki-sha256:<64 hex> (colons between byte pairs allowed).

pub fn spki_fingerprint(der: &[u8]) -> Option<String>

spki-sha256:<hex> of a DER certificate’s public key (for recording a pin). None if the certificate does not parse.

pub fn fingerprint(der: &[u8]) -> String

sha256:<hex> of a DER certificate (for recording a pin).

Trait Implementations

impl Clone for SeedTls

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeedTls

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SeedTls

impl PartialEq for SeedTls

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SeedTls