Enum PcrDescentError 

pub enum PcrDescentError {
    NoGenesis,
    LinkInvalid {
        position: usize,
        source: ChainValidationError,
    },
    PinnedNotInLineage,
    BootPayloadUnreadable(usize),
}

Why a live enclave’s PCRs could not be shown to descend from the caller’s pinned PCRs.

Variants

NoGenesis

The chain produced no usable genesis, so no in-force state could be established and nothing descends from anything.

LinkInvalid

A chain link failed validation (attestation, signature, or cross-link consistency). The whole chain is rejected: a single unverifiable link means the history is not a trustworthy account of how the enclave reached its current measurements.

Fields

position: usize

source: ChainValidationError

PinnedNotInLineage

Every link validated, but the pinned PCRs never appear as an in-force boot state on this chain. The chain may be a perfectly valid history of a DIFFERENT enclave; it does not start from (or pass through) the version the caller pinned, so the live measurements cannot be said to descend from the pinned ones.

BootPayloadUnreadable(usize)

A boot link the walker accepted carries a payload that no longer CBOR-decodes, or PCR hex that no longer parses. Indicates the link bytes were mutated between validation and this read; treated as fatal.

Trait Implementations

impl Debug for PcrDescentError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for PcrDescentError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for PcrDescentError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.