Enum Error 

#[non_exhaustive]
pub enum Error {
    NoPathFound,
    DepthExceeded,
    BudgetExceeded,
    #[non_exhaustive]
    NoValidPath {
        tried: usize,
        last_error: String,
    },
}

Errors returned by path building.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NoPathFound

No valid path from the target certificate to any trust anchor was found.

DepthExceeded

A topologically valid path exists but requires more intermediates than the configured maximum (see PathBuilderConfig::max_depth, default DEFAULT_MAX_DEPTH).

BudgetExceeded

The internal DFS node-visit budget was exhausted.

This guards against adversarial certificate pools that would otherwise cause exponential search time. The DFS and the depth probe each start with a fresh budget of PathBuilderConfig::dfs_budget node visits.

#[non_exhaustive]

NoValidPath

build_first_valid_path exhausted build_path_candidates without finding a candidate that pkix_path::validate_path accepted.

At least one topologically valid chain was found by the path builder, but every chain was rejected by the verifier or the validation policy (e.g., mixed-signature-algorithm cross-signed pools where the DFS candidate order picks an algorithm the SignatureVerifier does not dispatch; cross-cert chains where one issuer is expired at the validation time; etc.).

tried is the count of candidate chains rejected; it is always >= 1 for this variant (zero-yield exhaustion is reported as Error::NoPathFound instead, matching build_path’s contract).

last_error is the pkix_path::Error::Display rendering of the last candidate’s validation failure. It is carried as a String rather than a pkix_path::Error so Error retains its Hash derive (the upstream error enum does not implement Hash). Callers that need to programmatically match on the inner error should iterate build_path_candidates directly and call pkix_path::validate_path per candidate themselves.

Fields

Non-exhaustive enum variants could have additional fields added in future. Therefore, non-exhaustive enum variants cannot be constructed in external crates and cannot be matched against.

tried: usize

Number of candidate chains that were tried and rejected.

last_error: String

Display rendering of the last pkix_path::Error observed.

Trait Implementations

impl Clone for Error

fn clone(&self) -> Error

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Error

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Error

impl Error for Error

Available on crate feature std only.

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl Hash for Error

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Error

fn eq(&self, other: &Error) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Error

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Error