Struct for_mqtt_client::tls::rustls::PkiVerifier

pub struct PkiVerifier { /* private fields */ }

Default ServerCertVerifier, see the trait impl for more information.

Implementations

impl PkiVerifier

pub fn new(roots: Vec<Certificate>, verify_dns_name: bool) -> Self

Trait Implementations

impl ServerCertVerifier for PkiVerifier

fn verify_server_cert( &self, end_entity: &Certificate, intermediates: &[Certificate], server_name: &ServerName, _scts: &mut dyn Iterator<Item = &[u8]>, ocsp_response: &[u8], now: SystemTime ) -> Result<ServerCertVerified, Error>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme, Global>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn request_scts(&self) -> bool

Returns true if Rustls should ask the server to send SCTs.