Struct PyNameConstraintsBuilder 

pub struct PyNameConstraintsBuilder { /* private fields */ }

Fluent builder for a NameConstraints extension value (OID 2.5.29.30, RFC 5280 §4.2.1.10).

The NameConstraints extension restricts the namespace within which all subject names in certificates issued by a CA must fall. Names in permittedSubtrees are allowed; names in excludedSubtrees are forbidden. When present in a CA certificate this extension MUST be marked critical.

Add permitted and excluded subtrees using the typed methods, then call :meth:build to obtain the DER bytes of the NameConstraints SEQUENCE — the content that goes inside the OCTET STRING wrapper in the Extension SEQUENCE.

The class is also available as the short alias synta.ext.NC.

DNS name conventions: prefix the domain with a leading dot (e.g. ".example.com") to constrain the entire subtree rooted at example.com; omit the dot to constrain only that exact host.

IP address constraints: pass address bytes concatenated with mask bytes — 8 bytes for IPv4 (e.g. b"\\xc0\\xa8\\x00\\x00\\xff\\xff\\x00\\x00" for 192.168.0.0/16) or 32 bytes for IPv6.

import synta.ext as ext

# Permit example.com DNS subtree and a private IP range;
# exclude a known-bad subdomain.
nc = ext.NC() \
    .permit_dns(".example.com") \
    .permit_rfc822(".example.com") \
    .permit_ip(b"\x0a\x00\x00\x00\xff\x00\x00\x00") \
    .exclude_dns(".evil.com") \
    .build()

Trait Implementations

impl DerefToPyAny for PyNameConstraintsBuilder

impl ExtractPyClassWithClone for PyNameConstraintsBuilder

impl<'py> IntoPyObject<'py> for PyNameConstraintsBuilder

type Target = PyNameConstraintsBuilder

The Python output type

type Output = Bound<'py, <PyNameConstraintsBuilder as IntoPyObject<'py>>::Target>

The smart pointer type to use.

type Error = PyErr

The type returned in the event of a conversion error.

fn into_pyobject( self, py: Python<'py>, ) -> Result<<Self as IntoPyObject<'_>>::Output, <Self as IntoPyObject<'_>>::Error>

Performs the conversion.

impl PyClass for PyNameConstraintsBuilder

type Frozen = False

Whether the pyclass is frozen.

impl PyClassImpl for PyNameConstraintsBuilder

const IS_BASETYPE: bool = false

#[pyclass(subclass)]

const IS_SUBCLASS: bool = false

#[pyclass(extends=…)]

const IS_MAPPING: bool = false

#[pyclass(mapping)]

const IS_SEQUENCE: bool = false

#[pyclass(sequence)]

const IS_IMMUTABLE_TYPE: bool = false

#[pyclass(immutable_type)]

const RAW_DOC: &'static CStr = /// Fluent builder for a ``NameConstraints`` extension value (OID 2.5.29.30, /// RFC 5280 §4.2.1.10). /// /// The ``NameConstraints`` extension restricts the namespace within which all /// subject names in certificates issued by a CA must fall. Names in /// ``permittedSubtrees`` are allowed; names in ``excludedSubtrees`` are /// forbidden. When present in a CA certificate this extension MUST be marked /// critical. /// /// Add permitted and excluded subtrees using the typed methods, then call /// :meth:`build` to obtain the DER bytes of the ``NameConstraints`` SEQUENCE — /// the content that goes inside the OCTET STRING wrapper in the ``Extension`` /// SEQUENCE. /// /// The class is also available as the short alias ``synta.ext.NC``. /// /// **DNS name conventions:** prefix the domain with a leading dot (e.g. /// ``".example.com"``) to constrain the entire subtree rooted at /// ``example.com``; omit the dot to constrain only that exact host. /// /// **IP address constraints:** pass address bytes concatenated with mask bytes /// — 8 bytes for IPv4 (e.g. ``b"\\xc0\\xa8\\x00\\x00\\xff\\xff\\x00\\x00"`` /// for ``192.168.0.0/16``) or 32 bytes for IPv6. /// /// ```python,ignore /// import synta.ext as ext /// /// # Permit example.com DNS subtree and a private IP range; /// # exclude a known-bad subdomain. /// nc = ext.NC() \ /// .permit_dns(".example.com") \ /// .permit_rfc822(".example.com") \ /// .permit_ip(b"\x0a\x00\x00\x00\xff\x00\x00\x00") \ /// .exclude_dns(".evil.com") \ /// .build() /// ```

Docstring for the class provided on the struct or enum.

const DOC: &'static CStr

Fully rendered class doc, including the text_signature if a constructor is defined.

type BaseType = PyAny

Base class

type ThreadChecker = SendablePyClass<PyNameConstraintsBuilder>

This handles following two situations:

type PyClassMutability = <<PyAny as PyClassBaseType>::PyClassMutability as PyClassMutability>::MutableChild

Immutable or mutable

type Dict = PyClassDummySlot

Specify this class has #[pyclass(dict)] or not.

type WeakRef = PyClassDummySlot

Specify this class has #[pyclass(weakref)] or not.

type BaseNativeType = PyAny

The closest native ancestor. This is PyAny by default, and when you declare #[pyclass(extends=PyDict)], it’s PyDict.

fn items_iter() -> PyClassItemsIter

fn lazy_type_object() -> &'static LazyTypeObject<Self>

fn dict_offset() -> Option<isize>

fn weaklist_offset() -> Option<isize>

impl PyClassNewTextSignature for PyNameConstraintsBuilder

const TEXT_SIGNATURE: &'static str = "()"

impl PyMethods<PyNameConstraintsBuilder> for PyClassImplCollector<PyNameConstraintsBuilder>

fn py_methods(self) -> &'static PyClassItems

impl PyTypeInfo for PyNameConstraintsBuilder

const NAME: &'static str = "NameConstraintsBuilder"

Class name.

const MODULE: Option<&'static str> = ::core::option::Option::None

Module name, if any.

fn type_object_raw(py: Python<'_>) -> *mut PyTypeObject

Returns the PyTypeObject instance for this type.

fn type_object(py: Python<'_>) -> Bound<'_, PyType>

Returns the safe abstraction over the type object.

fn is_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type or a subclass of this type.

fn is_exact_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type.