Skip to main content

PolicyTreeNode

Struct PolicyTreeNode 

Source
#[non_exhaustive]
pub struct PolicyTreeNode { pub depth: usize, pub valid_policy: ObjectIdentifier, pub expected_policy_set: Vec<ObjectIdentifier>, pub qualifiers: Vec<PolicyQualifierInfo>, }
Expand description

A node in the §6.1.5 valid_policy_tree, exposed for post-validation qualifier extraction on ValidatedPath::valid_policy_tree.

This is the public mirror of the internal PolicyNode type. It is intentionally a separate public type so that the internal node shape (which may evolve as the path-validator gains features) is not part of the public API surface.

Fields (Non-exhaustive)§

This struct is marked as non-exhaustive
Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.
§depth: usize

Depth at which this node appears in the tree.

0 is the synthetic anyPolicy root sentinel (always present while the tree is alive; carries no qualifiers). 1 is the trust-anchor-adjacent CA. n is the leaf.

§valid_policy: ObjectIdentifier

The policy OID this node represents.

May be id-ce-certificatePolicies-anyPolicy (2.5.29.32.0) for nodes that survived an anyPolicy expansion or were not yet materialized into specific policies.

§expected_policy_set: Vec<ObjectIdentifier>

Set of policies in the next certificate that are consistent with this node, per RFC 5280 §6.1.2(a) expected_policy_set.

Initialized to {valid_policy} and updated by PolicyMappings extensions during the walk.

§qualifiers: Vec<PolicyQualifierInfo>

Policy qualifiers attached to this node, in the upstream PolicyQualifierInfo form: a (policy_qualifier_id, qualifier) pair where qualifier is a raw der::Any. Decoding is left to the caller because the x509-cert 0.2.5 UserNotice type has an upstream typo on notice_ref — pass-through avoids the buggy decoder. The two standard qualifier IDs are id-qt-cps (1.3.6.1.5.5.7.2.1, qualifier is a CPSuri / IA5String) and id-qt-unotice (1.3.6.1.5.5.7.2.2, qualifier is a UserNotice).

Trait Implementations§

Source§

impl Clone for PolicyTreeNode

Source§

fn clone(&self) -> PolicyTreeNode

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for PolicyTreeNode

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl PartialEq for PolicyTreeNode

Source§

fn eq(&self, other: &PolicyTreeNode) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Eq for PolicyTreeNode

Source§

impl StructuralPartialEq for PolicyTreeNode

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V