gamlastan 0.9.0

SAML 2.0 library - types, XML, crypto, metadata, bindings, security, profiles
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

// gamlastan crypto error types

use thiserror::Error;

/// Errors that occur during SAML cryptographic operations.
#[derive(Debug, Error)]
pub enum CryptoError {
    /// The underlying bergshamra library returned an error.
    #[error("XML security error: {0}")]
    BergshamraError(#[from] bergshamra_core::Error),

    /// A required key was not found in the keys manager.
    #[error("Key not found: {0}")]
    KeyNotFound(String),

    /// The signature contains a ds:Object element, which is rejected per E91.
    #[error("Signature contains ds:Object element (rejected per SAML errata E91)")]
    SignatureContainsDsObject,

    /// An unsupported algorithm was requested.
    #[error("Unsupported algorithm: {0}")]
    UnsupportedAlgorithm(String),

    /// A signature algorithm is supported by the backend but denied by policy.
    #[error("Signature algorithm is not allowed by SAML algorithm policy: {0}")]
    DisallowedSignatureAlgorithm(String),

    /// A reference digest algorithm is supported by the backend but denied by policy.
    #[error("Digest algorithm is not allowed by SAML algorithm policy: {0}")]
    DisallowedDigestAlgorithm(String),

    /// Signature verification failed.
    #[error("Signature verification failed: {0}")]
    VerificationFailed(String),

    /// Certificate validation failed.
    #[error("Certificate validation error: {0}")]
    CertificateError(String),

    /// Encryption failed.
    #[error("Encryption error: {0}")]
    EncryptionError(String),

    /// Decryption failed.
    #[error("Decryption error: {0}")]
    DecryptionError(String),

    /// An invalid configuration was provided.
    #[error("Configuration error: {0}")]
    ConfigError(String),

    /// An HSM / PKCS#11-backed signing operation failed.
    #[error("HSM signing error: {0}")]
    HsmError(String),
}