Crate webpki

source ·
Expand description

webpki: Web PKI X.509 Certificate Validation.

See EndEntityCert’s documentation for a description of the certificate processing steps necessary for a TLS connection.

Features

FeatureDescription
allocEnable features that require use of the heap. Currently all RSA signature algorithms require this feature.
stdEnable features that require libstd. Implies alloc.

Structs

  • AddrParseError
    An error indicating that an IpAddrRef could not built because the input could not be parsed as an IP address.
  • BorrowedCertRevocationList
    Borrowed representation of a RFC 5280 profile Certificate Revocation List (CRL).
  • BorrowedRevokedCert
    Borrowed representation of a RFC 5280 profile Certificate Revocation List (CRL) revoked certificate entry.
  • Cert
    A parsed X509 certificate.
  • DnsNamealloc
    Requires the alloc feature. A DNS Name suitable for use in the TLS Server Name Indication (SNI) extension and/or for use as the reference hostname for which to verify a certificate.
  • DnsNameRef
    A reference to a DNS Name suitable for use in the TLS Server Name Indication (SNI) extension and/or for use as the reference hostname for which to verify a certificate.
  • EndEntityCert
    An end-entity certificate.
  • InvalidDnsNameError
    An error indicating that a DnsNameRef could not built because the input is not a syntactically-valid DNS Name.
  • InvalidSubjectNameError
    An error indicating that a SubjectNameRef could not built because the input is not a syntactically-valid DNS Name or IP address.
  • KeyUsage
    The expected key usage of a certificate.
  • OwnedCertRevocationListalloc
    Owned representation of a RFC 5280 profile Certificate Revocation List (CRL).
  • OwnedRevokedCert
    Owned representation of a RFC 5280 profile Certificate Revocation List (CRL) revoked certificate entry.
  • SignatureAlgorithm
    A signature algorithm.
  • Time
    The time type.
  • TlsClientTrustAnchorsDeprecated
    Trust anchors which may be used for authenticating clients.
  • TlsServerTrustAnchorsDeprecated
    Trust anchors which may be used for authenticating servers.
  • TrustAnchor
    A trust anchor (a.k.a. root CA).

Enums

  • EndEntityOrCa
    An enumeration indicating whether a Cert is a leaf end-entity cert, or a linked list node from the CA Cert to a child Cert it issued.
  • Error
    An error that occurs during certificate validation or name validation.
  • IpAddralloc
    Either a IPv4 or IPv6 address, plus its owned string representation
  • IpAddrRef
    Either a IPv4 or IPv6 address, plus its borrowed string representation
  • RevocationReason
    Identifies the reason a certificate was revoked. See RFC 5280 §5.3.1
  • SubjectNameRef
    A DNS name or IP address, which borrows its text representation.

Statics

Traits