Struct CertificateDer 

pub struct CertificateDer(/* private fields */);

An X.509 certificate in DER form.

Implementations

impl CertificateDer

pub fn new(der: Vec<u8>) -> Result<Self, BackendError>

Wrap certificate DER bytes after checking they parse.

Errors

Returns BackendError::InvalidKeyFormat when the bytes are not an X.509 certificate.

pub fn from_key_material(bytes: &[u8]) -> Result<Self, BackendError>

Read a certificate out of whatever a ceremony hands over.

Accepts certificate DER and certificate PEM. Certificates reach a ceremony from files and counterparties, where PEM is the common encoding, so the sniff belongs here rather than at each call site.

The counterpart to PublicKeyDer::from_key_material. Both exist so that deciding what an encoding is happens in one place per type.

Errors

Returns BackendError::InvalidKeyFormat when the bytes are neither, or when a PEM block names something other than a certificate.

pub fn as_bytes(&self) -> &[u8]

The certificate DER bytes.

pub fn public_key(&self) -> Result<PublicKeyDer, BackendError>

The subject public key, as SPKI DER.

A signer’s public key usually reaches a ceremony inside a certificate rather than on its own: piv_read_certificate pulls one off a card, and a counterparty sends one. This lets a step name the certificate instead of the author extracting the key first.

Errors

Returns BackendError::InvalidKeyFormat when the certificate or its subject public key cannot be re-encoded.

Trait Implementations

impl Clone for CertificateDer

fn clone(&self) -> CertificateDer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateDer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CertificateDer

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CertificateDer

impl From<CertificateDer> for Vec<u8>

fn from(certificate: CertificateDer) -> Self

Converts to this type from the input type.

impl PartialEq for CertificateDer

fn eq(&self, other: &CertificateDer) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CertificateDer

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CertificateDer

impl TryFrom<Vec<u8>> for CertificateDer

type Error = BackendError

The type returned in the event of a conversion error.

fn try_from(der: Vec<u8>) -> Result<Self, Self::Error>

Performs the conversion.