Struct DirectoryCertificateStore

pub struct DirectoryCertificateStore { /* private fields */ }

Directory-based certificate store.

This is a simple implementation of the CertificateStore trait that uses a directory of certificates.

The directory should contain the certificates of the trust anchors, sub-CAs, and end-entities. The certificates should be in DER or PEM format.

This store will attempt to resolve the recipient’s certificate to a trust anchor certificate by following the certificate chain.

The TA certificates should be self-signed. The EE certificates should be signed by a sub-CA or a TA.

sub-CA certs should be signed by a TA or another sub-CA.

This store does not support CRLs or OCSP and does not check the path length constraints. It is meant for testing and educational purposes only.

For a real-world application, use you can write your own authenticator that implements the CertificateStore trait and can check the CRLs, OCSP, and path length constraints.

Implementations

impl DirectoryCertificateStore

pub fn new(path: &str) -> Result<DirectoryCertificateStore, QuantCryptError>

Create a new directory certificate store.

Arguments

• path - The path to the directory containing the certificates.

Returns

A new DirectoryCertificateStore instance.

Trait Implementations

impl CertificateStore for DirectoryCertificateStore

fn find(&self, ri: RecipientIdentifier) -> Option<Certificate>

Find a certificate by recipient identifier.