Struct PlatformVerifier

pub struct PlatformVerifier { /* private fields */ }

A TLS certificate verifier that uses the system’s root store and WebPKI.

Implementations

impl Verifier

pub fn new() -> Verifier

Creates a new verifier whose certificate validation is provided by WebPKI, using root certificates provided by the platform.

A CryptoProvider must be set with set_provider/with_provider or CryptoProvider::install_default before the verifier can be used.

pub fn new_with_extra_roots( roots: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<Verifier, Error>

Creates a new verifier whose certificate validation is provided by WebPKI, using root certificates provided by the platform and augmented by the provided extra root certificates.

impl Verifier

pub fn with_provider(self, crypto_provider: Arc<CryptoProvider>) -> Verifier

Chainable setter to configure the CryptoProvider for this Verifier.

This will be used instead of the rustls process-default CryptoProvider, even if one has been installed.

pub fn set_provider(&mut self, crypto_provider: Arc<CryptoProvider>)

Configures the CryptoProvider for this Verifier.

This will be used instead of the rustls process-default CryptoProvider, even if one has been installed.

Trait Implementations

impl Debug for Verifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Verifier

fn default() -> Verifier

Returns the “default value” for a type.

impl ServerCertVerifier for Verifier

fn verify_server_cert( &self, end_entity: &CertificateDer<'_>, intermediates: &[CertificateDer<'_>], server_name: &ServerName<'_>, ocsp_response: &[u8], now: UnixTime, ) -> Result<ServerCertVerified, Error>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn requires_raw_public_keys(&self) -> bool

Returns whether this verifier requires raw public keys as defined in RFC 7250.

fn root_hint_subjects(&self) -> Option<&[DistinguishedName]>

Return the DistinguishedNames of certificate authorities that this verifier trusts.