pub struct DirectoryCertificateStore { /* private fields */ }Expand description
Directory-based certificate store.
This is a simple implementation of the CertificateStore trait that
uses a directory of certificates.
The directory should contain the certificates of the trust anchors, sub-CAs, and end-entities. The certificates should be in DER or PEM format.
This store will attempt to resolve the recipient’s certificate to a trust anchor certificate by following the certificate chain.
The TA certificates should be self-signed. The EE certificates should be signed by a sub-CA or a TA.
sub-CA certs should be signed by a TA or another sub-CA.
This store does not support CRLs or OCSP and does not check the path length constraints. It is meant for testing and educational purposes only.
For a real-world application, use you can write your own authenticator that
implements the CertificateStore trait and can check the CRLs, OCSP,
and path length constraints.