Struct Limits 

pub struct Limits {
    pub permitted: Vec<String>,
    pub excluded: Vec<String>,
    pub constraints_critical: bool,
    pub path_len: Option<u32>,
    pub is_ca: bool,
    pub signs_only_certificates: bool,
}

What the encoded certificate says about how far it may reach.

Read with x509-parser rather than with rcgen, deliberately. The point of checking is that the bytes carry the limits, and asking the library that wrote them would only establish that it remembered its own input.

Fields

permitted: Vec<String>

Permitted DNS subtrees, in the order the certificate lists them.

excluded: Vec<String>

Excluded DNS subtrees. Expected to be empty: this design permits, it does not exclude.

constraints_critical: bool

Whether nameConstraints is marked critical, which RFC 5280 requires and which is what stops a verifier from skipping it.

path_len: Option<u32>

pathLenConstraint, if basicConstraints gives one. Some(0) means it cannot sign another authority.

is_ca: bool

signs_only_certificates: bool

Whether keyUsage allows anything beyond signing certificates and CRLs.

Trait Implementations

impl Debug for Limits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Limits

impl PartialEq for Limits

fn eq(&self, other: &Limits) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Limits