Struct rasn_pkix::TrustAnchorInfo

pub struct TrustAnchorInfo {
    pub version: TrustAnchorInfoVersion,
    pub pub_key: SubjectPublicKeyInfo,
    pub key_id: KeyIdentifier,
    pub ta_title: Option<TrustAnchorTitle>,
    pub cert_path: Option<CertPathControls>,
    pub exts: Option<Extensions>,
    pub ta_title_lang_tag: Option<Utf8String>,
}

Trust anchors are widely used to verify digital signatures and validate certification paths [RFC5280][X.509]. They are required when validating certification paths. Though widely used, there is no standard format for representing trust anchor information. The RFC-5914 document describes the TrustAnchorInfo structure.

Fields

version: TrustAnchorInfoVersion

version identifies the version of TrustAnchorInfo. Defaults to 1.

pub_key: SubjectPublicKeyInfo

pubKey identifies the public key and algorithm associated with the trust anchor using the SubjectPublicKeyInfo structure [RFC5280]. The SubjectPublicKeyInfo structure contains the algorithm identifier followed by the public key itself.

key_id: KeyIdentifier

keyId contains the public key identifier of the trust anchor public key.

ta_title: Option<TrustAnchorTitle>

taTitle is OPTIONAL. When it is present, it provides a human-readable name for the trust anchor.

cert_path: Option<CertPathControls>

certPath is OPTIONAL. When it is present, it provides the controls needed to initialize an X.509 certification path validation algorithm implementation (see Section 6 of [RFC5280]). When absent, the trust anchor cannot be used to validate the signature on an X.509 certificate.

exts: Option<Extensions>

exts is OPTIONAL. When it is present, it can be used to associate additional information with the trust anchor using the standard Extensions structure. Extensions that are anticipated to be widely used have been included in the CertPathControls structure to avoid overhead associated with use of the Extensions structure. To avoid duplication with the CertPathControls field, the following types of extensions MUST NOT appear in the exts field and are ignored if they do appear: id-ce-certificatePolicies, id-ce-policyConstraints, id-ce- inhibitAnyPolicy, or id-ce-nameConstraints.

ta_title_lang_tag: Option<Utf8String>

The taTitleLangTag field identifies the language used to express the taTitle. When taTitleLangTag is absent, English (“en” language tag) is used.

Trait Implementations

impl AsnType for TrustAnchorInfo

const TAG: Tag = _

The associated tag for the type.

const TAG_TREE: TagTree = _

The root of this type’s tree of tag’s if it a CHOICE type, otherwise its Leaf that points Self::TAG.

const CONSTRAINTS: Constraints<'static> = Constraints::NONE

The set of constraints for values of the given type.

const IDENTIFIER: Option<&'static str> = None

Identifier of an ASN.1 type as specified in the original specification if not identical with the identifier of Self

impl Clone for TrustAnchorInfo

fn clone(&self) -> TrustAnchorInfo

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Constructed for TrustAnchorInfo

const FIELDS: Fields = _

Fields contained in the “root component list”.

const EXTENDED_FIELDS: Option<Fields> = None

Fields contained in the list of extensions.

impl Debug for TrustAnchorInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decode for TrustAnchorInfo

fn decode_with_tag_and_constraints<'constraints, D: Decoder>( decoder: &mut D, tag: Tag, constraints: Constraints<'constraints>, ) -> Result<Self, D::Error>

Decode this value implicitly tagged with tag from a given ASN.1 decoder with a set of constraints on what values of that type are allowed.

fn decode<D>(decoder: &mut D) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value from a given ASN.1 decoder.

fn decode_with_tag<D>( decoder: &mut D, tag: Tag, ) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value implicitly tagged with tag from a given ASN.1 decoder.

fn decode_with_constraints<D>( decoder: &mut D, constraints: Constraints<'_>, ) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value from a given ASN.1 decoder with a set of constraints on what values of that type are allowed.

impl Encode for TrustAnchorInfo

fn encode_with_tag_and_constraints<'constraints, EN: Encoder>( &self, encoder: &mut EN, tag: Tag, constraints: Constraints<'constraints>, ) -> Result<(), EN::Error>

Encode this value with tag into the given crate::Encoder with the constraints the values this is allowed to encode into.

fn encode<E>(&self, encoder: &mut E) -> Result<(), <E as Encoder>::Error>

where E: Encoder,

Encodes self’s data into the given crate::Encoder.

fn encode_with_tag<E>( &self, encoder: &mut E, tag: Tag, ) -> Result<(), <E as Encoder>::Error>

where E: Encoder,

Encode this value with tag into the given crate::Encoder.

fn encode_with_constraints<E>( &self, encoder: &mut E, constraints: Constraints<'_>, ) -> Result<(), <E as Encoder>::Error>

where E: Encoder,

Encode this value into the given crate::Encoder with the constraints the values this is allowed to encode into.

impl Hash for TrustAnchorInfo

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustAnchorInfo

fn eq(&self, other: &TrustAnchorInfo) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for TrustAnchorInfo

impl StructuralPartialEq for TrustAnchorInfo