Struct mls_rs::identity::x509::X509IdentityProvider

#[non_exhaustive]
pub struct X509IdentityProvider<IE, V> {
    pub identity_extractor: IE,
    pub validator: V,
}

A customizable generic X.509 certificate identity provider.

This provider forwards its individual IdentityProvider behavior to its generic sub-components.

Only X509 credentials are supported by this provider.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

identity_extractor: IE

validator: V

Implementations

impl<IE, V> X509IdentityProvider<IE, V>

where IE: X509IdentityExtractor, V: X509CredentialValidator,

pub fn new(identity_extractor: IE, validator: V) -> X509IdentityProvider<IE, V>

Create a new identity provider.

pub fn validate( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime>, ) -> Result<(), X509IdentityError>

Determine if a certificate is valid based on the behavior of the underlying validator provided.

pub fn identity( &self, signing_id: &SigningIdentity, ) -> Result<Vec<u8>, X509IdentityError>

Produce a unique identity value to represent the entity controlling a certificate credential within an MLS group.

pub fn valid_successor( &self, predecessor: &SigningIdentity, successor: &SigningIdentity, ) -> Result<bool, X509IdentityError>

Determine if successor is controlled by the same entity as predecessor based on the behavior of the underlying identity extractor provided.

pub fn supported_types(&self) -> Vec<CredentialType>

Supported credential types.

Only CredentialType::X509 is supported.

Trait Implementations

impl<IE, V> Clone for X509IdentityProvider<IE, V>

where IE: Clone, V: Clone,

fn clone(&self) -> X509IdentityProvider<IE, V>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<IE, V> Debug for X509IdentityProvider<IE, V>

where IE: Debug, V: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<IE, V> IdentityProvider for X509IdentityProvider<IE, V>

where IE: X509IdentityExtractor + Send + Sync, V: X509CredentialValidator + Send + Sync,

type Error = X509IdentityError

Error type that this provider returns on internal failure.

fn validate_member( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime>, _extensions: Option<&ExtensionList>, ) -> Result<(), <X509IdentityProvider<IE, V> as IdentityProvider>::Error>

Determine if signing_identity is valid for a group member.

fn validate_external_sender( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime>, _extensions: Option<&ExtensionList>, ) -> Result<(), <X509IdentityProvider<IE, V> as IdentityProvider>::Error>

Determine if signing_identity is valid for an external sender in the ExternalSendersExtension stored in the group context.

fn identity( &self, signing_id: &SigningIdentity, _extensions: &ExtensionList, ) -> Result<Vec<u8>, <X509IdentityProvider<IE, V> as IdentityProvider>::Error>

A unique identifier for signing_identity.

fn valid_successor( &self, predecessor: &SigningIdentity, successor: &SigningIdentity, _extensions: &ExtensionList, ) -> Result<bool, <X509IdentityProvider<IE, V> as IdentityProvider>::Error>

Determines if successor can remove predecessor as part of an external commit.

fn supported_types(&self) -> Vec<CredentialType>

Credential types that are supported by this provider.