Struct Capabilities 

pub struct Capabilities {
    pub key_usage: KeyUsages,
    pub basic_constraints: BasicConstraints,
}

An abstraction over X.509 Extensions and PKCS#10 Attributes, representing the capabilities of a certificate. Capabilities can be converted from and to both Attributes and Extensions.

This struct only covers the Attributes/Extensions currently relevant to polyproto.

Fields

key_usage: KeyUsages

The key usage extension defines the purpose of the key contained in the certificate.

basic_constraints: BasicConstraints

Extension type that defines whether a given certificate is allowed to sign additional certificates and what path length restrictions may exist.

Implementations

impl Capabilities

pub fn default_actor() -> Self

Sane default for actor ID-CSR/ID-Cert Capabilities. Uses the DigitalSignature flag, not the ContentCommitment flag.

pub fn default_home_server() -> Self

Sane default for home server ID-CSR/ID-Cert Capabilities.

pub fn validate(&self) -> Result<(), ConstraintError>

Validates that these capabilities are well-formed according to X.509 and polyproto constraints. This validation is target-independent.

Errors

Returns a crate::errors::ConstraintError if the capabilities are malformed.

pub fn validate_for_actor(&self) -> Result<(), ConstraintError>

Validates that these capabilities are correct for an actor certificate.

In addition to the base validation, this checks:

• The CA flag must be false
• Must have DigitalSignature or ContentCommitment
• Must not have KeyCertSign

Errors

Returns a crate::errors::ConstraintError if the capabilities are not valid for an actor.

pub fn validate_for_home_server(&self) -> Result<(), ConstraintError>

Validates that these capabilities are correct for a home server certificate.

In addition to the base validation, this checks:

• The CA flag must be true
• Must have KeyCertSign

Errors

Returns a crate::errors::ConstraintError if the capabilities are not valid for a home server.

Trait Implementations

impl Clone for Capabilities

fn clone(&self) -> Capabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Capabilities

fn default() -> Self

Returns the “default value” for a type.

impl Eq for Capabilities

impl From<ActorCapabilities> for Capabilities

fn from(value: ActorCapabilities) -> Self

Converts to this type from the input type.

impl From<HomeServerCapabilities> for Capabilities

fn from(value: HomeServerCapabilities) -> Self

Converts to this type from the input type.

impl Hash for Capabilities

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Capabilities

fn cmp(&self, other: &Capabilities) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Capabilities

fn eq(&self, other: &Capabilities) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Capabilities

fn partial_cmp(&self, other: &Capabilities) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for Capabilities

impl TryFrom<Capabilities> for Attributes

fn try_from(value: Capabilities) -> Result<Self, Self::Error>

Performs the conversion.

Fails, if Capabilities::validate() fails.

type Error = CertificateConversionError

The type returned in the event of a conversion error.

impl TryFrom<Capabilities> for Extensions

fn try_from(value: Capabilities) -> Result<Self, Self::Error>

Performs the conversion.

try_from does not check whether the resulting Extensions are well-formed.

type Error = CertificateConversionError

The type returned in the event of a conversion error.

impl TryFrom<Capabilities> for ActorCapabilities

type Error = ConstraintError

The type returned in the event of a conversion error.

fn try_from(value: Capabilities) -> Result<Self, Self::Error>

Performs the conversion.

impl TryFrom<Capabilities> for HomeServerCapabilities

type Error = ConstraintError

The type returned in the event of a conversion error.

fn try_from(value: Capabilities) -> Result<Self, Self::Error>

Performs the conversion.

impl TryFrom<SetOfVec<Attribute>> for Capabilities

fn try_from(value: Attributes) -> Result<Self, Self::Error>

Performs the conversion.

Fails if the BasicConstraints or KeyUsages are malformed. The constraints returned by this method are not guaranteed to be valid. You should call validate() on the result to ensure that the constraints are valid according to the X.509 standard and the polyproto specification.

type Error = CertificateConversionError

The type returned in the event of a conversion error.

impl TryFrom<Vec<Extension>> for Capabilities

fn try_from(value: Extensions) -> Result<Self, Self::Error>

Performs the conversion.

try_from does not check whether the resulting Capabilities are well-formed. If this property is critical, use the Capabilities::validate() method to verify the well-formedness of these resulting Capabilities.

type Error = CertificateConversionError

The type returned in the event of a conversion error.