Struct PyVerificationPolicy 

pub struct PyVerificationPolicy { /* private fields */ }

Optional parameters that control certificate chain verification.

All fields have safe defaults so you only need to set what differs from the standard WebPKI TLS server / client validation.

server_names accepts a list of DNS hostnames or IP address literals. When more than one name is given, name_match controls whether the certificate must cover any (default) or all of them:

• "any" — connection validation: the certificate is accepted if it matches at least one name in the list (e.g. you are connecting to one of several possible endpoints).
• "all" — cert assessment: the certificate must cover every name (e.g. checking a cert covers your entire domain set before deploying).

import synta.x509 as x509

# Single name — classic behaviour:
policy = x509.VerificationPolicy(server_names=["example.com"])

# Any-match: accept the cert if it covers either name (connection validation):
policy = x509.VerificationPolicy(
    server_names=["example.com", "www.example.com"],
    name_match="any",
)

# All-match: verify the cert covers every name (cert assessment):
policy = x509.VerificationPolicy(
    server_names=["example.com", "api.example.com"],
    name_match="all",
)

# Strict RFC 5280 profile with a fixed validation time, no SAN check:
policy = x509.VerificationPolicy(
    profile="rfc5280",
    validation_time=1_700_000_000,
    max_chain_depth=4,
)

Trait Implementations

impl<'py> IntoPyObject<'py> for PyVerificationPolicy

type Target = PyVerificationPolicy

The Python output type

type Output = Bound<'py, <PyVerificationPolicy as IntoPyObject<'py>>::Target>

The smart pointer type to use.

type Error = PyErr

The type returned in the event of a conversion error.

fn into_pyobject( self, py: Python<'py>, ) -> Result<<Self as IntoPyObject<'_>>::Output, <Self as IntoPyObject<'_>>::Error>

Performs the conversion.

impl PyClass for PyVerificationPolicy

type Frozen = False

Whether the pyclass is frozen.

impl PyClassImpl for PyVerificationPolicy

const IS_BASETYPE: bool = false

#[pyclass(subclass)]

const IS_SUBCLASS: bool = false

#[pyclass(extends=…)]

const IS_MAPPING: bool = false

#[pyclass(mapping)]

const IS_SEQUENCE: bool = false

#[pyclass(sequence)]

const IS_IMMUTABLE_TYPE: bool = false

#[pyclass(immutable_type)]

const RAW_DOC: &'static CStr = /// Optional parameters that control certificate chain verification. /// /// All fields have safe defaults so you only need to set what differs from /// the standard WebPKI TLS server / client validation. /// /// ``server_names`` accepts a list of DNS hostnames or IP address literals. /// When more than one name is given, ``name_match`` controls whether the /// certificate must cover **any** (default) or **all** of them: /// /// * ``"any"`` — connection validation: the certificate is accepted if it /// matches at least one name in the list (e.g. you are connecting to one /// of several possible endpoints). /// * ``"all"`` — cert assessment: the certificate must cover every name /// (e.g. checking a cert covers your entire domain set before deploying). /// /// ```python,ignore /// import synta.x509 as x509 /// /// # Single name — classic behaviour: /// policy = x509.VerificationPolicy(server_names=["example.com"]) /// /// # Any-match: accept the cert if it covers either name (connection validation): /// policy = x509.VerificationPolicy( /// server_names=["example.com", "www.example.com"], /// name_match="any", /// ) /// /// # All-match: verify the cert covers every name (cert assessment): /// policy = x509.VerificationPolicy( /// server_names=["example.com", "api.example.com"], /// name_match="all", /// ) /// /// # Strict RFC 5280 profile with a fixed validation time, no SAN check: /// policy = x509.VerificationPolicy( /// profile="rfc5280", /// validation_time=1_700_000_000, /// max_chain_depth=4, /// ) /// ```

Docstring for the class provided on the struct or enum.

const DOC: &'static CStr

Fully rendered class doc, including the text_signature if a constructor is defined.

type BaseType = PyAny

Base class

type ThreadChecker = SendablePyClass<PyVerificationPolicy>

This handles following two situations:

type PyClassMutability = <<PyAny as PyClassBaseType>::PyClassMutability as PyClassMutability>::MutableChild

Immutable or mutable

type Dict = PyClassDummySlot

Specify this class has #[pyclass(dict)] or not.

type WeakRef = PyClassDummySlot

Specify this class has #[pyclass(weakref)] or not.

type BaseNativeType = PyAny

The closest native ancestor. This is PyAny by default, and when you declare #[pyclass(extends=PyDict)], it’s PyDict.

fn items_iter() -> PyClassItemsIter

fn lazy_type_object() -> &'static LazyTypeObject<Self>

fn dict_offset() -> Option<isize>

fn weaklist_offset() -> Option<isize>

impl PyClassNewTextSignature for PyVerificationPolicy

const TEXT_SIGNATURE: &'static str = "(*, server_names=None, name_match=None, validation_time=None, max_chain_depth=8, profile=None)"

impl PyMethods<PyVerificationPolicy> for PyClassImplCollector<PyVerificationPolicy>

fn py_methods(self) -> &'static PyClassItems

impl PyTypeInfo for PyVerificationPolicy

const NAME: &'static str = "VerificationPolicy"

Class name.

const MODULE: Option<&'static str> = ::core::option::Option::None

Module name, if any.

fn type_object_raw(py: Python<'_>) -> *mut PyTypeObject

Returns the PyTypeObject instance for this type.

fn type_object(py: Python<'_>) -> Bound<'_, PyType>

Returns the safe abstraction over the type object.

fn is_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type or a subclass of this type.

fn is_exact_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type.

impl DerefToPyAny for PyVerificationPolicy

impl ExtractPyClassWithClone for PyVerificationPolicy