Enum DnAttrRule 

#[non_exhaustive]
pub enum DnAttrRule {
    Field(ObjectIdentifier),
    AllOf(Vec<DnAttrRule>),
    AnyOf(Vec<DnAttrRule>),
}

Compositional rule for asserting required Subject DN attributes on a leaf cert.

Designed to express CA/B Forum S/MIME BR tier rules such as “must have organizationName” or “must have pseudonym OR (givenName AND surname)” without committing the workspace to a fixed list of attribute requirements.

The Field variant matches when the named OID appears at least once in the leaf’s Subject DN RDN sequence (any RDN, any AttributeTypeAndValue within an RDN). AllOf and AnyOf compose subordinate rules.

Vacuity

• AllOf(vec![]) accepts every Subject DN (vacuously true).
• AnyOf(vec![]) rejects every Subject DN (vacuously false).

Callers writing AnyOf should not pass an empty list unless that is the intended semantics.

Example

Express “Subject must have pseudonym, or both givenName and surname”:

use pkix_path::DnAttrRule;
use der::asn1::ObjectIdentifier;

const PSEUDONYM:  ObjectIdentifier = ObjectIdentifier::new_unwrap("2.5.4.65");
const GIVEN_NAME: ObjectIdentifier = ObjectIdentifier::new_unwrap("2.5.4.42");
const SURNAME:    ObjectIdentifier = ObjectIdentifier::new_unwrap("2.5.4.4");

let rule = DnAttrRule::AnyOf(vec![
    DnAttrRule::Field(PSEUDONYM),
    DnAttrRule::AllOf(vec![
        DnAttrRule::Field(GIVEN_NAME),
        DnAttrRule::Field(SURNAME),
    ]),
]);

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Field(ObjectIdentifier)

Match when the named attribute OID appears at least once in the leaf’s Subject DN.

AllOf(Vec<DnAttrRule>)

Match when every subordinate rule matches. AllOf(vec![]) is vacuously true.

AnyOf(Vec<DnAttrRule>)

Match when at least one subordinate rule matches. AnyOf(vec![]) is vacuously false.

Trait Implementations

impl Clone for DnAttrRule

fn clone(&self) -> DnAttrRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DnAttrRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DnAttrRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for DnAttrRule

impl PartialEq for DnAttrRule

fn eq(&self, other: &DnAttrRule) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DnAttrRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DnAttrRule