pub struct SubjectIdentityExtractor<R>where
R: X509CertificateReader,{ /* private fields */ }Expand description
A utility to determine unique identity for use with MLS by reading the subject of a certificate.
The default behavior of this struct is to try and produce an identity based on the common name component of the subject. If a common name component is not found, then the byte value of the entire subject is used as a fallback.
Implementations§
Source§impl<R> SubjectIdentityExtractor<R>where
R: X509CertificateReader,
impl<R> SubjectIdentityExtractor<R>where
R: X509CertificateReader,
Sourcepub fn new(offset: usize, reader: R) -> SubjectIdentityExtractor<R>
pub fn new(offset: usize, reader: R) -> SubjectIdentityExtractor<R>
Create a new identity extractor.
offset is used to determine which certificate in a CertificateChain
should be used to evaluate identity. A value of 0 indicates to use the
leaf (first value) of the chain.
Sourcepub fn identity(
&self,
certificate_chain: &CertificateChain,
) -> Result<Vec<u8>, X509IdentityError>
pub fn identity( &self, certificate_chain: &CertificateChain, ) -> Result<Vec<u8>, X509IdentityError>
Get a unique identifier for a certificate_chain.
Sourcepub fn valid_successor(
&self,
predecessor: &CertificateChain,
successor: &CertificateChain,
) -> Result<bool, X509IdentityError>
pub fn valid_successor( &self, predecessor: &CertificateChain, successor: &CertificateChain, ) -> Result<bool, X509IdentityError>
Determine if successor resolves to the same
identity value as predecessor, indicating that
predecessor and successor are controlled by the same entity.
Trait Implementations§
Source§impl<R> Clone for SubjectIdentityExtractor<R>where
R: Clone + X509CertificateReader,
impl<R> Clone for SubjectIdentityExtractor<R>where
R: Clone + X509CertificateReader,
Source§fn clone(&self) -> SubjectIdentityExtractor<R>
fn clone(&self) -> SubjectIdentityExtractor<R>
Returns a duplicate of the value. Read more
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl<R> Debug for SubjectIdentityExtractor<R>where
R: Debug + X509CertificateReader,
impl<R> Debug for SubjectIdentityExtractor<R>where
R: Debug + X509CertificateReader,
Source§impl<R> X509IdentityExtractor for SubjectIdentityExtractor<R>where
R: X509CertificateReader,
impl<R> X509IdentityExtractor for SubjectIdentityExtractor<R>where
R: X509CertificateReader,
type Error = X509IdentityError
Source§fn identity(
&self,
certificate_chain: &CertificateChain,
) -> Result<Vec<u8>, <SubjectIdentityExtractor<R> as X509IdentityExtractor>::Error>
fn identity( &self, certificate_chain: &CertificateChain, ) -> Result<Vec<u8>, <SubjectIdentityExtractor<R> as X509IdentityExtractor>::Error>
Produce a unique identity value to represent the entity controlling a
certificate credential within an MLS group.
Source§fn valid_successor(
&self,
predecessor: &CertificateChain,
successor: &CertificateChain,
) -> Result<bool, <SubjectIdentityExtractor<R> as X509IdentityExtractor>::Error>
fn valid_successor( &self, predecessor: &CertificateChain, successor: &CertificateChain, ) -> Result<bool, <SubjectIdentityExtractor<R> as X509IdentityExtractor>::Error>
Determine if
successor is controlled by the same entity as
predecessor.Auto Trait Implementations§
impl<R> Freeze for SubjectIdentityExtractor<R>where
R: Freeze,
impl<R> RefUnwindSafe for SubjectIdentityExtractor<R>where
R: RefUnwindSafe,
impl<R> Send for SubjectIdentityExtractor<R>where
R: Send,
impl<R> Sync for SubjectIdentityExtractor<R>where
R: Sync,
impl<R> Unpin for SubjectIdentityExtractor<R>where
R: Unpin,
impl<R> UnwindSafe for SubjectIdentityExtractor<R>where
R: UnwindSafe,
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more