Struct X509StoreCtx 

pub struct X509StoreCtx { /* private fields */ }

A chain-verification context (X509_STORE_CTX*).

Create with X509StoreCtx::new, initialise with X509StoreCtx::init, then call X509StoreCtx::verify.

Implementations

impl X509StoreCtx

pub fn new() -> Result<Self, ErrorStack>

Allocate a new, uninitialised verification context.

Errors

pub fn init(&mut self, store: &X509Store, cert: &X509) -> Result<(), ErrorStack>

Initialise the context for verifying cert against store.

Call this before Self::verify.

Errors

pub fn verify(&mut self) -> Result<bool, ErrorStack>

Verify the certificate chain.

Returns Ok(true) if the chain is valid, Ok(false) if not (call Self::error to retrieve the error code), or Err on a fatal error.

Errors

pub fn error(&self) -> i32

OpenSSL verification error code after a failed Self::verify.

Returns 0 (X509_V_OK) if no error occurred. See <openssl/x509_vfy.h> for the full list of X509_V_ERR_* constants.

pub fn chain(&self) -> Vec<X509>

Collect the verified chain into a Vec<X509>.

Only meaningful after a successful Self::verify. Returns an empty Vec if the chain is not available.

Trait Implementations

impl Drop for X509StoreCtx

fn drop(&mut self)

Executes the destructor for this type.

impl Send for X509StoreCtx