Struct CertPinStore 

pub struct CertPinStore { /* private fields */ }

Thread-safe store for peer certificate fingerprint pins.

Verification Semantics

Policy	Unknown peer	Fingerprint matches	Fingerprint mismatch
TrustOnFirstUse	PinnedNew (pin + accept)	Accepted	Mismatch
Strict	UnknownPeer (reject)	Accepted	Mismatch
Observe	Accepted	Accepted	Accepted (+counter)

Implementations

impl CertPinStore

pub fn new(policy: PinPolicy) -> Arc<Self>

Create a new store wrapped in an Arc.

pub fn pin( &self, peer_id: impl Into<String>, fingerprint: CertFingerprint, now_ms: u64, )

Pre-register a trusted fingerprint for a peer.

If the peer is already pinned this call is a no-op (existing pin preserved).

pub fn unpin(&self, peer_id: &str) -> bool

Remove a pinned peer.

Returns true if a pin was present and removed.

pub fn verify( &self, peer_id: &str, fingerprint: &CertFingerprint, now_ms: u64, ) -> VerificationResult

Verify a peer’s certificate fingerprint against the current policy.

pub fn get_pin(&self, peer_id: &str) -> Option<PeerCertPin>

Retrieve the pin info for a peer, if any.

pub fn pinned_peers(&self) -> Vec<String>

Return a list of all pinned peer IDs.

pub fn pin_count(&self) -> usize

Number of currently pinned peers.

pub fn mismatch_count(&self) -> u64

Total fingerprint mismatches detected across all verifications.

pub fn tofu_count(&self) -> u64

Total TOFU pins created.

pub fn export_pins(&self) -> Vec<PeerCertPin>

Export all pins as a serializable vector.

pub fn import_pins(&self, pins: Vec<PeerCertPin>)

Import pins (merge). Existing pins are not overwritten.