Enum NocError 

#[non_exhaustive]
pub enum NocError {
    NocsrParse(Box<dyn Error + Send + Sync + 'static>),
    CsrParse(Box<dyn Error + Send + Sync + 'static>),
    BadCsrSelfSignature,
    NonceMismatch,
    BadCsrAttestationSignature,
    InvalidCsrPublicKey,
    DnAttributeOverflow,
    CertBuild(Error),
    SigningFailed(SignerError),
    Rng,
    ClusterCodec(Error),
    MalformedResponse(&'static str),
}

Errors produced by matter-commissioning::noc.

Variants are coarse-grained — each maps to a distinct caller-side remediation path. See the M6.3 design doc’s “Information leakage in error variants” table for the audit reasoning.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NocsrParse(Box<dyn Error + Send + Sync + 'static>)

The NOCSR TLV outer envelope was malformed.

CsrParse(Box<dyn Error + Send + Sync + 'static>)

The embedded PKCS#10 CSR could not be parsed.

BadCsrSelfSignature

The PKCS#10 CSR’s self-signature did not verify.

NonceMismatch

The CSRNonce echoed by the device did not match the value the commissioner sent in CSRRequest.

BadCsrAttestationSignature

The DAC’s signature over NOCSR_elements || attestation_challenge did not verify. Coarse by design (see design doc).

InvalidCsrPublicKey

The CSR’s public key was not a valid P-256 SEC1 uncompressed point.

DnAttributeOverflow

A Matter DN attribute (e.g., a CaseAuthenticatedTag) could not be constructed from the caller-supplied values.

CertBuild(Error)

NOC certificate construction via the matter-cert builder failed.

SigningFailed(SignerError)

The fabric’s root signer rejected the signing operation.

Rng

The system RNG (or a caller-supplied stub) failed.

ClusterCodec(Error)

An OpCreds cluster command codec failed.

MalformedResponse(&'static str)

An OpCreds cluster response was structurally malformed — the TLV itself decoded, but its shape violated the expected schema (wrong container kind / tag, duplicate field, a fixed-width field with the wrong length, or a required field absent).

Distinct from NocError::ClusterCodec, which wraps a low-level codec failure (e.g. a truncated buffer). A structural mismatch must not be reported as a codec EOF — the carried &'static str names what was expected so callers and logs get an accurate label.

Trait Implementations

impl Debug for NocError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for NocError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for NocError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for NocError

fn from(e: Error) -> Self

Converts to this type from the input type.

impl From<NocError> for CommissioningError

fn from(source: NocError) -> Self

Converts to this type from the input type.