Enum TrustRoots 

pub enum TrustRoots {
    Platform,
    Bundled,
}

Which certificate roots verify a server’s TLS certificate.

Verification is always on; there is no option that turns it off. Platform hands the decision to the operating system (macOS Security framework, Windows CryptoAPI, the system roots on Linux) through rustls-platform-verifier in both clients, so roots an enterprise or an inspection proxy installed on the machine are honoured, as curl and browsers honour them.

Android. Platform goes through rustls-platform-verifier, which on Android calls the system TrustManager over JNI and needs the verifier’s Android component and a one-time initialisation with the app’s JavaVM and Context (the rightkit-android bridge’s job). This crate does not do that initialisation. Until it has run, Platform fails closed as described below; it never falls back to another root set. An Android caller that has not wired the verifier selects Bundled, which needs no JNI. Both clients are built with rustls and ring only: there is no OpenSSL or native-tls to cross-build. Neither path has been run on a device.

Variants

Platform

The operating system’s trust store. This is the default. When the store cannot be used the client fails closed: the handshake (blocking) or AsyncClient::new (async) returns an error.

Bundled

Mozilla’s root certificates compiled into the crate (webpki-roots), ignoring the machine’s store. Use it when the machine’s roots must not be trusted, or when results must not depend on the machine. A host behind TLS inspection will fail.

Implementations

impl TrustRoots

pub fn verifier_kind(self) -> &'static str

"platform" or "bundled": the verifier a client built from this setting uses.

Trait Implementations

impl Clone for TrustRoots

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustRoots

impl Debug for TrustRoots

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustRoots

fn default() -> Self

Returns the “default value” for a type.

impl Eq for TrustRoots

impl PartialEq for TrustRoots

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TrustRoots