Enum Error 

#[non_exhaustive]
pub enum Error {
    SignatureInvalid {
        index: usize,
    },
    MalformedCertificate {
        index: usize,
    },
    ValidityPeriod {
        index: usize,
    },
    ChainBroken {
        index: usize,
    },
    NoTrustedPath,
    PathTooLong,
    NotCA {
        index: usize,
    },
    KeyUsageMissing {
        index: usize,
    },
    UnhandledCriticalExtension {
        index: usize,
    },
    Der(Error),
}

Errors returned by path validation.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

SignatureInvalid

Certificate signature verification failed at the given chain index.

Fields

index: usize

Zero-based index into the chain slice of the failing certificate.

MalformedCertificate

A structural encoding error was found in a certificate.

Currently returned when the outer signatureAlgorithm field differs from the inner TBSCertificate.signature field (RFC 5280 §4.1.1.2).

Fields

index: usize

Zero-based index into the chain slice of the malformed certificate.

ValidityPeriod

Certificate validity period check failed (expired or not yet valid).

Fields

index: usize

Zero-based index into the chain slice of the failing certificate.

ChainBroken

Issuer/subject name linkage is broken at the given chain index.

Fields

index: usize

Zero-based index into the chain slice where the break was found.

NoTrustedPath

No path from the subject certificate to any trust anchor was found.

PathTooLong

Path length exceeds ValidationPolicy::max_path_len.

NotCA

An intermediate certificate is missing BasicConstraints cA=TRUE.

Fields

index: usize

Zero-based index into the chain slice of the failing certificate.

KeyUsageMissing

An intermediate certificate is missing KeyUsage keyCertSign.

Fields

index: usize

Zero-based index into the chain slice of the failing certificate.

UnhandledCriticalExtension

A critical extension is present that this implementation does not handle.

Fields

index: usize

Zero-based index into the chain slice of the failing certificate.

Der(Error)

ASN.1 / DER decoding error.

Returned when DER encoding of a TBS structure fails inside chain_walk (e.g. the TBS is too large for the internal stack buffer). The inner der::Error is exposed for diagnostic purposes; callers that want a stable match target should check for Error::Der(_) without inspecting the inner value, as the specific der::Error variants are not part of the stable API contract.

Trait Implementations

impl Debug for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for Error

Available on crate feature std only.

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for Error

fn from(e: Error) -> Self

Converts to this type from the input type.