Enum TrustRootStalenessError 

pub enum TrustRootStalenessError {
    MalformedEmbeddedSnapshotDate {
        observed: String,
        reason: String,
    },
    EmbeddedSnapshotMidnightConstruction,
    CacheMetadata {
        path: PathBuf,
        source: Error,
    },
    CacheMtime {
        path: PathBuf,
        source: Error,
    },
    CacheFutureDated {
        anchor: String,
        anchor_ts: DateTime<Utc>,
        now: DateTime<Utc>,
        tolerance_seconds: u64,
    },
}

Errors produced while resolving a TrustRootStalenessAnchor.

These surface to the CLI when the caller’s selected anchor source is structurally unavailable (e.g. unreadable cache file). They are not the “trust root is stale” branch — that is the Ok(true) return of TrustedRoot::is_stale_at.

Variants

MalformedEmbeddedSnapshotDate

EMBEDDED_TRUSTED_ROOT_SNAPSHOT_DATE constant did not parse as YYYY-MM-DD. Build-time bug — surfaces to operators only when a fresh build is mis-tagged.

Fields

observed: String

The observed snapshot-date string that failed to parse.

reason: String

Underlying chrono parse error message.

EmbeddedSnapshotMidnightConstruction

NaiveDate::and_hms_opt(0,0,0) failed; not actually reachable for any well-formed date but retained so the anchor resolver can fail closed rather than panic.

CacheMetadata

std::fs::metadata on the cache file failed (file missing, unreadable permissions, etc.).

Fields

path: PathBuf

Cache path the caller supplied.

source: Error

Underlying I/O failure.

CacheMtime

File metadata was read but modified() was unsupported / failed.

Fields

path: PathBuf

Cache path the caller supplied.

source: Error

Underlying I/O failure.

CacheFutureDated

The resolved freshness anchor is dated more than the operator tolerance ahead of wall-clock.

Prior F3 closure: a future-dated cache mtime (e.g. set via touch -d 2099-01-01) used to silently pass the freshness gate because the now - mtime > max_age comparison goes false for a negative duration. The check is now fail-closed: any anchor more than TRUSTED_ROOT_CACHE_FUTURE_MTIME_TOLERANCE in the future surfaces this error and the caller MUST refuse the operation with STABLE_INVARIANT_TRUSTED_ROOT_CACHE_FUTURE_DATED.

Fields

anchor: String

Diagnostic label naming the anchor source (embedded_snapshot_date=… or cache_file_mtime path=…).

anchor_ts: DateTime<Utc>

Resolved anchor timestamp (the future-dated value).

now: DateTime<Utc>

Wall-clock at the check.

tolerance_seconds: u64

Tolerance window expressed in seconds (matches TRUSTED_ROOT_CACHE_FUTURE_MTIME_TOLERANCE).

Trait Implementations

impl Debug for TrustRootStalenessError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TrustRootStalenessError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for TrustRootStalenessError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.