Enum rpki::cert::Overclaim

pub enum Overclaim {
    Refuse,
    Trim,
}

The overclaim mode for resource validation.

In the original RPKI specification, a certificate becomes valid if it claims more resources than its issuer, a condition known as ‘overclaiming’. [RFC 8360] proposed an alternative approach where in this case the resources of the certificate are simply trimmed back to what the issuer certificate allows. This makes handling cases where a CA loses some resources easier.

A certificate can choose to use the old or new method by using different OIDs for the certificate policy and the resource extensions.

This type specifies which mode a certificate uses.

Variants

Refuse

A certificate becomes invalid if it overclaims resources.

Trim

Overclaimed resources are trimmed to the by encompassed by the issuer.

Methods

impl Overclaim

pub fn policy_id(self) -> &'static ConstOid

pub fn ip_res_id(self) -> &'static ConstOid

pub fn as_res_id(self) -> &'static ConstOid

Trait Implementations

impl Clone for Overclaim

fn clone(&self) -> Overclaim

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Overclaim

impl Eq for Overclaim

impl PartialEq<Overclaim> for Overclaim

fn eq(&self, other: &Overclaim) -> bool

This method tests for self and other values to be equal, and is used by ==.

#[must_use] fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl Debug for Overclaim

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Hash for Overclaim

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given [Hasher].

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given [Hasher].